HTML Code Security & Protection

Web Crypto is unavailable in this context. Open this page from a local file, http://localhost, or an https:// address in a modern browser (Chrome, Edge, Firefox, Safari). Protection is disabled here.

Original Code

0Characters

0Lines

0 BEst. source size

ReadyEncryption status

Protection Settings

AES-256-GCM

🎛 Protection mode

🌐 Public view (recommended) The site opens for everyone — search engines and direct links work, no password at the door. The source stays encrypted and unreadable in the file; copying / viewing source asks for the owner password (if enabled). 🔒 Lock mode Visitors must enter a password before the page opens at all. Strongest client-side secrecy.

🔑 Source access password

Password

Confirm password

Minimum 8 characters. Passphrases with spaces are fine. 12+ characters with upper/lowercase, numbers and symbols are recommended.

Password strength Empty

12+ characters (recommended)
At least 8 characters
Uppercase letter
Lowercase letter
Number
Special character

Important: Keep this password safe — if it is forgotten, it cannot be recovered by this tool.

🛡 Protection options

AES-256-GCM Encryption Real authenticated encryption (Web Crypto API). Always enabled — never fake/base64. Always on Tamper Detection Authenticated payload — any modification fails decryption. Always enabled. Always on Disable right-click Blocks the context menu in the protected file (deterrent). Disable copy Blocks copy/cut shortcuts and actions in the protected file (deterrent). Disable View Source (Ctrl+U / Ctrl+S) Prevents common source-viewing shortcuts in the protected file (deterrent). Disable text selection Prevents casual text selection/copying in the protected file (deterrent). Light DevTools deterrence Detects common inspection shortcuts & docked DevTools and shows a notice. Off by default so it does not disturb legitimate visitors.

📄 Output file

Filename

e.g. my-protected-site.html

Ready

🔎 Security note — read before trusting this tool

Encryption protects the source data while locked. Once the code is decrypted and executed inside a browser, a technically skilled user may be able to inspect runtime behavior. No client-side HTML protection can guarantee absolute secrecy against a determined attacker.

This tool uses real cryptography (PBKDF2-HMAC-SHA-256 + AES-256-GCM via the Web Crypto API) with a random salt and IV. It never stores your password and never embeds your plaintext source in the protected file. The right-click / copy / view-source / selection and DevTools options are deterrents only, not security boundaries.