Three plain steps
Client-side encryption, store it, retrieve it anywhere. No mysticism — just post-quantum cryptography.
Upload
Pick a file or type a message. It is encrypted in your browser with ML-KEM-768 and AES-256-GCM before anything leaves your machine.
Store
Your envelope lands in your vault cache under a content-hash label — we never hold your plaintext.
Retrieve
Download the .raziel file or fetch it from your vault, then decrypt with your secret key on any device. Done.
Files first, messages too
Encrypt a file and download a .raziel envelope, or switch to the message tab. Everything is sealed client-side with ML-KEM.
Encrypt a file
Choose a file. It is encrypted in your browser and downloaded as a .raziel envelope. Nothing is uploaded until you store it.
Decrypt a file
Upload a .raziel envelope and supply your secret key. The plaintext is reconstructed locally and downloaded.
Encrypt a message
Type text and get back a .raziel envelope you can copy or store. No signature is added during encryption.
Get a free key
Decrypt a message
Paste a .raziel envelope and your secret key to recover the plaintext.
Encrypt, download, decrypt — anywhere
Seal a file into a .raziel envelope on your device with post-quantum ML-KEM, download it, and decrypt with your secret key from any browser. Raziel processes the cryptography — your file never lives on our servers.
Encrypted copies in the vault auto-delete after 6 hours (free) / 12h (payg) / 24h (pro) / 48h (enterprise). This is a transfer cache — download your envelope; it is not long-term storage.
Your encrypted transfer cache
When you seal a file, the encrypted envelope is held briefly so you can retrieve it from another device — it is a cache, not cloud storage. Download it and it is gone from our side.
Create accountPay for what you process
Start free. Scale to pay-as-you-go credits or a flat pro plan. Enterprise stays behind a conversation.
Encrypt from your own code
POST a file or message to our endpoint with your API key. You get back a .raziel envelope. No account required to try — grab a free key below.
curl -X POST https://raziel-pqc.cc/api/v1/encrypt \
-H "Authorization: Bearer $KEY" \
-H "Content-Type: application/octet-stream" \
--data-binary @document.pdf \
-o document.pdf.raziel