Windows security software

Your files.
Encrypted.
Physically protected.

LockBytes combines AES-256-GCM file encryption with a registered USB security layer, keeping normal vault operations on your own Windows device.

Download for Windows See the protection model

Windows 10 / 11 Local-first by design

▤ YOUR FILES documents · photos · videos

▣ USB VAULT registered device

↗ RECOVERY your Google Drive

LOCKBYTES VAULT
AES-256-GCM

AES-256-GCM Authenticated encryption

USB-BOUND Physical access layer

LOCAL-FIRST No LockBytes file server

RECOVERY READY Optional Google Drive layer

THE SECURITY PROBLEM

A password is a gate.
LockBytes adds a key.

A protected file should not become readable simply because someone reaches your computer. LockBytes separates the protection model into layers: encrypted data, vault credentials, and the presence of a registered USB device.

It is a Windows desktop vault, not cloud storage. Your files stay local during normal encryption and decryption.

HOW LOCKBYTES WORKS

From an ordinary file to a layered vault.

Each step has a job. Encryption protects the data; the physical layer helps control when the vault can be opened.

01 ▤ Your file Selected locally

02 ✦ Encryption AES-256-GCM

03 ▰ Encrypted vault Authenticated data

04 ▣ USB security layer Registered presence

PHYSICAL
SECURITY LAYER

THE DIFFERENCE

Your encryption key is not only an idea.

LockBytes uses a registered USB device as part of the vault protection process. The USB is a security layer with an identity and vault metadata, not just a place to put files.

Register Pair a USB device with your LockBytes vault.

Detect The application checks for the registered device when access is needed.

Unlock Physical possession works alongside the required credentials.

THE ENCRYPTION ENGINE

Strong encryption, explained plainly.

LockBytes uses AES-256-GCM authenticated encryption to protect encrypted file data and help detect unauthorized modification.

Large files are processed in chunks, so the application does not need to load an entire file into memory at once. Passwords, keys, and vault metadata remain part of the local protection model.

LOCKBYTES / ENCRYPTION PROTECTED

INPUT YOUR FILE

CIPHER AES-256-GCM

OUTPUT ENCRYPTED VAULT DATA

AUTHENTICATED DATA ✓

RECOVERY PROTECTION

Physical protection guards access.
Recovery protection guards against loss.

If your registered USB is lost, damaged, or unavailable, LockBytes can use your own Google Drive account as a recovery mechanism.

Google Drive is not needed for normal encryption or decryption. It is a separate, user-controlled recovery layer.

Read how Google data is handled

▣ USB VAULT Physical layer

G GOOGLE DRIVE LOCKBYTES_RECOVERY

◆ MULTI-LAYER PROTECTION Encrypted recovery data

SECURITY ARCHITECTURE

A vault built from distinct layers.

The complete model, from credentials to protected files.

01 Vault password Your secret input

02 Protected key material Stored with vault metadata

03 Registered USB layer Physical presence and identity

04 AES-256-GCM vault Encrypted, authenticated files

CAPABILITIES

Everything has a place in the model.

Practical controls for protecting files on a Windows computer.

01 / CORE

AES-256-GCM encryption

Authenticated encryption for protected file data, with modification detection.

02 / ACCESS

Registered USB vault

USB registration, identity, metadata, presence detection, and physical access control.

03 / PRIVACY

Local-first operation

Normal encryption and decryption happen on your device without a LockBytes file server.

04 / SCALE

Chunk-based processing

Large files can be handled without loading the entire file into memory at once.

05 / RECOVERY

Google Drive recovery

Your own account, the Drive API, and a dedicated LOCKBYTES_RECOVERY location for encrypted recovery data.

06 / CONTROL

Application and vault credentials

Separate credentials and local security material keep access under the user's control.

CLEAR BOUNDARIES

Security that tells you what it does.

LockBytes does not promise impossible things. It provides a local encryption and access model, while you remain responsible for credentials, USB devices, recovery data, and backups.

Core file operations Local

Internet for normal encryption Not required

Google Drive Optional recovery

LockBytes central file server None

MADE FOR

People who want their sensitive files close, controlled, and harder to casually access.

01 Personal documents, financial records, and identity files

02 Photos, videos, and creative work that should stay private

03 Anyone who wants a physical security layer beyond a password

SUPPORT THE PROJECT

Privacy tools matter more when they keep getting better.

Sensitive files, account takeovers, and data leaks are part of everyday life now. LockBytes gives Windows users a practical local-first way to add encryption and a physical security layer to the files they care about.

Your support helps keep development, documentation, recovery work, and future security improvements moving forward.

Use LockBytes Protect your important files with the current release.

Support development Help make independent privacy software more capable and accessible.

Support LockBytes

GET STARTED

Put a physical layer between your files and access.

Download LockBytes for Windows and build your vault around the protection model.

Download LockBytes

Your files. Encrypted. Physically protected.

A password is a gate. LockBytes adds a key.