CYBERSECURITY EDUCATION TOOL
See How Ransomware
Actually Works
A safe, browser-only simulation of symmetric file encryption. Encrypts files using real AES-256-GCM — the same algorithm used in real ransomware — entirely in your browser. No files leave your device.
Educational purposes only. This tool runs 100% locally in your browser.
No files are uploaded to any server. Encryption/decryption happens entirely via the Web Crypto API.
Save your decryption key — it cannot be recovered if lost.
Step 01
Select Files to Encrypt
Drop files here or click to browse
Supports any file type · Processed locally
Step 02
Encryption Key
A unique 256-bit AES key is generated per session.
Copy and save it — you'll need it to decrypt.
Key generates when you encrypt ↓
Algorithm
AES-GCM
Key Size
256-bit
IV Size
96-bit
🔐 Each file gets its own random Initialization Vector (IV) prepended to the ciphertext.
The IV is public — only the key must stay secret.
Hex Dump Preview
— No file selected —
▶ Original Bytes (Plaintext)
Select a file to preview its raw bytes...
🔒 Encrypted Bytes (Ciphertext)
Encrypted preview appears after encryption...
Encryption Log
$
RansomLab v1.0 · Web Crypto API · AES-256-GCM
#
Waiting for file selection...
Encrypting...
0%
Step 03
Encrypt & Download
Files will be downloaded as .locked —
a bundle file containing IV + ciphertext.
Output
Encrypted Files
No files encrypted yet.
Step 01
Load Encrypted Files
Drop .locked files here
Only files encrypted by RansomLab can be decrypted
Step 02
Enter Decryption Key
Paste the 256-bit key that was generated during encryption.
The key is case-sensitive and must be exact.
Awaiting key input
Decryption Log
$
RansomLab Decryptor · AES-256-GCM
#
Load .locked files and enter decryption key to begin...
Decrypting...
0%
Step 03
Decrypt & Recover
Recovered files will be downloaded with their original names and extensions.
Output
Recovered Files
No files decrypted yet.