age encryption

Mode

Ciphertext input

Generate X25519 keypair

Generates a new random age identity (private key) and the corresponding recipient (public key). These are generated locally using the Web Crypto API.

Derive recipient from identity

If you have a private key (AGE-SECRET-KEY-1...) but need its public recipient (age1...).

What is age?

age (Actually Good Encryption) is a simple, modern file encryption tool designed by Filippo Valsorda. It uses X25519 keys or passphrases, has a clean format with no config knobs, and is interoperable across all implementations. Files encrypted here can be decrypted with any standards-compliant age CLI or library, and vice versa.

This tool is an independent project and is not affiliated with or endorsed by the age project or Filippo Valsorda. It uses the typage library to implement the age format.

Spec & source: age-encryption.org/v1  ·  github.com/FiloSottile/age  ·  typage

Offline use

This is a single self-contained HTML file with no external dependencies. Save this page (Ctrl+S / Cmd+S) and open it from your local filesystem at any time — no internet connection required.

Install age CLI — macOS

Official source: github.com/FiloSottile/age/releases

Homebrew (recommended):

MacPorts:

Install age CLI — Linux

Official source: github.com/FiloSottile/age/releases

Debian / Ubuntu:

Fedora / RHEL:

Arch Linux:

Binary download (any distro):

Install age CLI — Windows

Official source: github.com/FiloSottile/age/releases

Scoop (recommended):

Winget:

Binary download:

Common CLI commands

Generate a new keypair:

Encrypt to a recipient:

Encrypt to multiple recipients:

Encrypt with a passphrase:

Decrypt with a private key:

Decrypt with a passphrase:

Encrypt with ASCII armor (text output):