Cleaver

What Cleaver Does · Private by design · Simple by default

Send sensitive files with confidence.

Cleaver encrypts files locally in your browser. Nothing is uploaded. You get a secure lock file and one portable key bundle—everything you need for a private handoff, without an account or cloud storage.

The process

From file to secure handoff.

Choose a file. Cleaver reads it in the browser and never needs an upload endpoint.
Enter a numeric PIN. The PIN selects and combines random key records inside the bundle to derive the AES key.
Download every output. Keep the .lock file and its .bundle file.
Decrypt later. Provide the lock file, the same PIN, and its key bundle to recover the original file.

What To Keep

Store the encrypted .lock file separately from its key bundle. Anyone decrypting needs the lock file, the PIN, and that one bundle.

What Cleaver Cannot Do

Cleaver cannot recover a lost PIN, missing key bundle, corrupted lock file, or overwritten download. Treat the generated files as the only recovery material.

Deployment Shape

The Go binary embeds the files in public/ and serves them over HTTP. Build once, copy the binary, and run it with the address you want to expose.

Encrypt File

Choose a CSV file and set a numeric PIN. Cleaver creates the encryption key randomly in your browser.

Downloads

Select a file and encrypt it. Your lock file and key bundle will appear here.

Cleaver cannot recover a lost PIN or missing key bundle.

Decrypt File

Select a Cleaver lock file and its key bundle together, then provide the PIN created during encryption.

Result

Your decrypted file will appear here after a successful decrypt.

Edit Lock File

Unlock a CSV file in your browser, edit it as a spreadsheet, then export a new locked CSV with the same PIN and key bundle.