├── CNAME ├── python ├── requirements.txt ├── README.md └── encrypt.py ├── favicon.ico ├── .gitignore ├── LICENSE-FAVICON.md ├── README.md ├── CONTRIBUTING.md ├── .github └── FUNDING.yml ├── LICENSE.md ├── PowerShell ├── README.md └── Encrypt-StaticHTML.ps1 ├── legacy ├── demopage-unencrypted.html ├── github.svg ├── js │ ├── pbkdf2.js │ ├── FileSaver.js │ └── aes.js ├── index.html ├── decryptTemplate.html └── demopage │ └── index.html ├── demopage-unencrypted.html ├── github.svg ├── js └── FileSaver.js ├── demopage └── index.html ├── decryptTemplate.html ├── index.html └── decryptTemplate-legacy.html /CNAME: -------------------------------------------------------------------------------- 1 | pagecrypt.maxlaumeister.com -------------------------------------------------------------------------------- /python/requirements.txt: -------------------------------------------------------------------------------- 1 | pycryptodome>3.10 2 | -------------------------------------------------------------------------------- /favicon.ico: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/MaxLaumeister/PageCrypt/HEAD/favicon.ico -------------------------------------------------------------------------------- /.gitignore: -------------------------------------------------------------------------------- 1 | output.html 2 | 3 | ###################### 4 | # OS generated files # 5 | ###################### 6 | 7 | .DS_Store 8 | .DS_Store? 9 | ._* 10 | .Spotlight-V100 11 | .Trashes 12 | ehthumbs.db 13 | Thumbs.db 14 | -------------------------------------------------------------------------------- /LICENSE-FAVICON.md: -------------------------------------------------------------------------------- 1 | License for favicon.ico: 2 | 3 | This favicon was generated using the following graphics from Twitter Twemoji: 4 | 5 | - Graphics Title: 1f512.svg 6 | - Graphics Author: Copyright 2020 Twitter, Inc and other contributors (https://github.com/twitter/twemoji) 7 | - Graphics Source: https://github.com/twitter/twemoji/blob/master/assets/svg/1f512.svg 8 | - Graphics License: CC-BY 4.0 (https://creativecommons.org/licenses/by/4.0/) 9 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | ## PageCrypt - Password Protect HTML ## 2 | 3 | ### Overview ### 4 | 5 | This tool lets you securely password-protect an HTML file. Unlike other password-protection tools, this tool: 6 | 7 | 1. Has no server-side components (this tool and its password-protected pages run entirely in javascript). 8 | 9 | 2. Uses strong encryption, so the password-protection cannot be bypassed. 10 | 11 | For details and to use the tool, please see the [Project Page](https://pagecrypt.maxlaumeister.com/). 12 | -------------------------------------------------------------------------------- /CONTRIBUTING.md: -------------------------------------------------------------------------------- 1 | # Contributing to PageCrypt 2 | 3 | Thank you for taking the time to contribute! 4 | 5 | There are no specific guidelines for contributing to this project, but I want to make it clear that contributions are always welcome! 6 | 7 | This project has already accepted the generous contributions of **Zoltán Gálli** and **Nial Francis**. For details, read [the PageCrypt FAQ](https://www.maxlaumeister.com/pagecrypt/). Hopefully, you're next! 8 | 9 | If you have any questions, please don't hesitate to open a GitHub issue or [email me](https://www.maxlaumeister.com/contact/) directly. 10 | -------------------------------------------------------------------------------- /python/README.md: -------------------------------------------------------------------------------- 1 | ## Command Line Interface with Python ## 2 | This tool securely password-protects HTML files from the command line using Python3. 3 | 4 | ### Usage ### 5 | Run: `pip3 install -r requirements.txt` 6 | Run: `python3 encrypt.py filename [passphrase]` 7 | The first, mandatory parameter is the name of the file you want to encrypt. 8 | It is also possible to give the passphrase as the second parameter. If there is 9 | no passphrase provided at start, the script will ask for it while running. 10 | 11 | ### Dependencies ### 12 | 1) Python3 and Pip3 13 | 2) [pycryptodome](https://pypi.org/project/pycryptodome/) for AES. (pycrypto is [deprecated](https://github.com/pycrypto/pycrypto/issues/275)) 14 | 3) Python version of [pbkdf2](https://pypi.org/project/pbkdf2/): `pip3 install pbkdf2` 15 | -------------------------------------------------------------------------------- /.github/FUNDING.yml: -------------------------------------------------------------------------------- 1 | # These are supported funding model platforms 2 | 3 | github: # Replace with up to 4 GitHub Sponsors-enabled usernames e.g., [user1, user2] 4 | patreon: # Replace with a single Patreon username 5 | open_collective: # Replace with a single Open Collective username 6 | ko_fi: # Replace with a single Ko-fi username 7 | tidelift: # Replace with a single Tidelift platform-name/package-name e.g., npm/babel 8 | community_bridge: # Replace with a single Community Bridge project-name e.g., cloud-foundry 9 | liberapay: # Replace with a single Liberapay username 10 | issuehunt: # Replace with a single IssueHunt username 11 | otechie: # Replace with a single Otechie username 12 | custom: ['https://www.maxlaumeister.com/tip/'] # Replace with up to 4 custom sponsorship URLs e.g., ['link1', 'link2'] 13 | -------------------------------------------------------------------------------- /LICENSE.md: -------------------------------------------------------------------------------- 1 | Copyright (c) 2021 Maximillian Laumeister 2 | Copyright (c) 2021 Samuel Plumppu 3 | 4 | Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: 5 | 6 | The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. 7 | 8 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. 9 | -------------------------------------------------------------------------------- /PowerShell/README.md: -------------------------------------------------------------------------------- 1 | ## Command Line Interface for PowerShell ## 2 | 3 | This tool securely password-protects HTML files from the command line using PowerShell (written with v5 but will very likely work on lower versions and Core). It utilises .NET encryption libraries. 4 | 5 | This implementation will also support a number of cypher changes (eg. key size and hash iterations) which the template currently does not. 6 | 7 | ### Usage ### 8 | 9 | Add this script and the `decryptTemplate-legacy.html` template into the same directory. 10 | 11 | To encrypt a string of text: 12 | `.\Encrypt-StaticHTML.ps1 -Text '--text to encrypt--' -Password '--encryption password--'` 13 | 14 | To encrypt a file: 15 | `.\Encrypt-StaticHTML.ps1 -File example.html -Password '--encryption password--'` 16 | 17 | ### Parameters ### 18 | 19 | **Mandatory:** 20 | `Password` = key password 21 | `Text` = text to encrypt, or 22 | `File` = file to encrypt 23 | 24 | **Optional:** 25 | `Template` = Custom template location 26 | `OutFile` = Destination file 27 | `KeySize` = AES key size (default 32 bytes) 28 | `Iterations` = Hash iterations (default 100) 29 | 30 | ### Dependencies ### 31 | 32 | None on Windows. 33 | -------------------------------------------------------------------------------- /legacy/demopage-unencrypted.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | File Unlocked! 8 | 24 | 25 | 26 |
27 |

Page Unlocked!

28 |

You're looking at a web page that has just been decrypted by your browser using the password you supplied. This works with any HTML page, including pages which use CSS 29 | 32 |

33 |

Go back home

34 |
35 | 36 | 37 | -------------------------------------------------------------------------------- /demopage-unencrypted.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | File Unlocked! 8 | 24 | 25 | 26 |
27 |

Page Unlocked!

28 |

You're looking at a web page that has just been decrypted by your browser using the password you supplied. This works with any HTML page, including pages which use Unicode ⚡, CSS 29 | 32 |

33 |

Go back home

34 |
35 | 36 | 37 | -------------------------------------------------------------------------------- /github.svg: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /legacy/github.svg: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /python/encrypt.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/python3 2 | 3 | try: 4 | from Crypto import Random 5 | from Crypto.Util.py3compat import bchr 6 | from Crypto.Cipher import AES 7 | from Crypto.Protocol.KDF import PBKDF2 8 | from Crypto.Hash import SHA256 9 | except: 10 | print("install pycrypto: \"pip3 install pycrypto\"") 11 | exit(1) 12 | import os, sys 13 | from base64 import b64encode 14 | from getpass import getpass 15 | import codecs 16 | 17 | 18 | def main(): 19 | # sanitize input 20 | if len(sys.argv) < 2: 21 | print("Usage:\n%s filename [passphrase]"%sys.argv[0]) 22 | exit(0) 23 | inputfile = sys.argv[1] 24 | try: 25 | with open(inputfile, "rb") as f: 26 | data = f.read() 27 | except: 28 | print("Cannot open file: %s"%inputfile) 29 | exit(1) 30 | 31 | if len(sys.argv) > 2: 32 | passphrase = sys.argv[2] 33 | else: 34 | while True: 35 | passphrase = getpass(prompt='Password: ') 36 | if passphrase == getpass(prompt='Confirm: '): 37 | break 38 | print("Passwords don\'t match, try again.") 39 | 40 | salt = Random.new().read(32) 41 | key = PBKDF2( 42 | passphrase.encode('utf-8'), 43 | salt, 44 | count=100000, 45 | dkLen=32, 46 | hmac_hash_module=SHA256 47 | ) 48 | iv = Random.new().read(16) 49 | 50 | cipher = AES.new(key, AES.MODE_GCM, nonce=iv) 51 | encrypted, tag = cipher.encrypt_and_digest(data) 52 | 53 | projectFolder = os.path.dirname(os.path.dirname(os.path.abspath(__file__))) 54 | with open(os.path.join(projectFolder, "decryptTemplate.html")) as f: 55 | templateHTML = f.read() 56 | 57 | 58 | encryptedPl = f'"{b64encode(salt+iv+encrypted+tag).decode("utf-8")}"' 59 | encryptedDocument = templateHTML.replace("/*{{ENCRYPTED_PAYLOAD}}*/\"\"", encryptedPl) 60 | 61 | filename, extension = os.path.splitext(inputfile) 62 | outputfile = filename + "-protected" + extension 63 | with codecs.open(outputfile, 'w','utf-8-sig') as f: 64 | f.write(encryptedDocument) 65 | print("File saved to %s"%outputfile) 66 | 67 | if __name__ == "__main__": 68 | main() 69 | -------------------------------------------------------------------------------- /PowerShell/Encrypt-StaticHTML.ps1: -------------------------------------------------------------------------------- 1 | #### PowerShell PageCrypt Encryptor 2 | ## v1.0 - 26/11/2019 3 | ## Nial Francis - https://nialfrancis.tech/ 4 | 5 | [cmdletbinding()] 6 | Param( 7 | [string]$Text, 8 | [string]$File, 9 | [string]$Password, 10 | [string]$Template, 11 | [string]$OutFile, 12 | [int]$KeySize = 32, 13 | [int]$Iterations = 100 14 | ) 15 | 16 | #### FUNCTIONS 17 | 18 | function Encrypt-StaticHTMLData ($sec,$data) { 19 | $ibytes = [System.Text.Encoding]::UTF8.GetBytes($data) 20 | Write-Verbose $ibytes.Length 21 | if ( $ibytes.Length % 16 -eq 0 ) { $ibytes = $ibytes + 0 } 22 | Write-Verbose ($sec | Out-String) 23 | 24 | $AES = New-Object Security.Cryptography.RijndaelManaged 25 | $AES.Padding = 'Zeros' 26 | 27 | $enc = $AES.CreateEncryptor($sec.key,$sec.iv) 28 | $encdata = $enc.TransformFinalBlock($ibytes, 0, $ibytes.Length) 29 | 30 | $AES.Dispose() 31 | Clear-Variable enc 32 | return $encdata 33 | } 34 | 35 | function GenerateKey { 36 | $salt = new-object byte[] 32 37 | $iv = new-object byte[] 16 38 | (new-object Random).NextBytes($salt) 39 | (new-object Random).NextBytes($iv) 40 | 41 | $PBKDF2 = New-Object System.Security.Cryptography.Rfc2898DeriveBytes($Password, $salt) 42 | $PBKDF2.IterationCount = $Iterations 43 | 44 | $secrets = @{ 45 | salt = $salt 46 | key = $PBKDF2.GetBytes($KeySize) 47 | iv = $iv 48 | } 49 | 50 | $PBKDF2.Dispose() 51 | return $secrets 52 | } 53 | 54 | #### MAIN 55 | 56 | if ($Template -eq '') { $Template = Join-Path $PSScriptRoot 'decryptTemplate-legacy.html' } 57 | if ($Password.Length -lt 8) { Write-Warning 'Password is very poor quality' } 58 | 59 | if ($File) { 60 | $data = Get-Content -Raw -Encoding UTF8 $File 61 | if (!$OutFile) { $OutFile = $File + '.enc.html' } 62 | } elseif ($Text) { 63 | $data = $Text 64 | if (!$OutFile) { $OutFile = (Get-Date -Format 'ddMMyy-HHmmss') + '.enc.html' } 65 | } else { 66 | throw "Nothing to encrypt" 67 | } 68 | 69 | $sec = GenerateKey 70 | $encbytes = Encrypt-StaticHTMLData $sec $data 71 | $json = @{ 72 | data = [System.Convert]::ToBase64String($encbytes) 73 | iv = [System.Convert]::ToBase64String($sec.iv) 74 | salt = [System.Convert]::ToBase64String($sec.salt) 75 | } | ConvertTo-Json -Compress 76 | Clear-Variable sec 77 | 78 | $Template = Get-Content -Raw $Template 79 | $newfile = $Template -replace '/\*{{ENCRYPTED_PAYLOAD}}\*/""',$json 80 | $newfile | Out-File -Encoding utf8 $OutFile 81 | -------------------------------------------------------------------------------- /legacy/js/pbkdf2.js: -------------------------------------------------------------------------------- 1 | /* 2 | CryptoJS v3.1.2 3 | code.google.com/p/crypto-js 4 | (c) 2009-2013 by Jeff Mott. All rights reserved. 5 | code.google.com/p/crypto-js/wiki/License 6 | */ 7 | var CryptoJS=CryptoJS||function(g,j){var e={},d=e.lib={},m=function(){},n=d.Base={extend:function(a){m.prototype=this;var c=new m;a&&c.mixIn(a);c.hasOwnProperty("init")||(c.init=function(){c.$super.init.apply(this,arguments)});c.init.prototype=c;c.$super=this;return c},create:function(){var a=this.extend();a.init.apply(a,arguments);return a},init:function(){},mixIn:function(a){for(var c in a)a.hasOwnProperty(c)&&(this[c]=a[c]);a.hasOwnProperty("toString")&&(this.toString=a.toString)},clone:function(){return this.init.prototype.extend(this)}}, 8 | q=d.WordArray=n.extend({init:function(a,c){a=this.words=a||[];this.sigBytes=c!=j?c:4*a.length},toString:function(a){return(a||l).stringify(this)},concat:function(a){var c=this.words,p=a.words,f=this.sigBytes;a=a.sigBytes;this.clamp();if(f%4)for(var b=0;b>>2]|=(p[b>>>2]>>>24-8*(b%4)&255)<<24-8*((f+b)%4);else if(65535>>2]=p[b>>>2];else c.push.apply(c,p);this.sigBytes+=a;return this},clamp:function(){var a=this.words,c=this.sigBytes;a[c>>>2]&=4294967295<< 9 | 32-8*(c%4);a.length=g.ceil(c/4)},clone:function(){var a=n.clone.call(this);a.words=this.words.slice(0);return a},random:function(a){for(var c=[],b=0;b>>2]>>>24-8*(f%4)&255;b.push((d>>>4).toString(16));b.push((d&15).toString(16))}return b.join("")},parse:function(a){for(var c=a.length,b=[],f=0;f>>3]|=parseInt(a.substr(f, 10 | 2),16)<<24-4*(f%8);return new q.init(b,c/2)}},k=b.Latin1={stringify:function(a){var c=a.words;a=a.sigBytes;for(var b=[],f=0;f>>2]>>>24-8*(f%4)&255));return b.join("")},parse:function(a){for(var c=a.length,b=[],f=0;f>>2]|=(a.charCodeAt(f)&255)<<24-8*(f%4);return new q.init(b,c)}},h=b.Utf8={stringify:function(a){try{return decodeURIComponent(escape(k.stringify(a)))}catch(b){throw Error("Malformed UTF-8 data");}},parse:function(a){return k.parse(unescape(encodeURIComponent(a)))}}, 11 | u=d.BufferedBlockAlgorithm=n.extend({reset:function(){this._data=new q.init;this._nDataBytes=0},_append:function(a){"string"==typeof a&&(a=h.parse(a));this._data.concat(a);this._nDataBytes+=a.sigBytes},_process:function(a){var b=this._data,d=b.words,f=b.sigBytes,l=this.blockSize,e=f/(4*l),e=a?g.ceil(e):g.max((e|0)-this._minBufferSize,0);a=e*l;f=g.min(4*a,f);if(a){for(var h=0;ha;a++){if(16>a)m[a]=d[e+a]|0;else{var c=m[a-3]^m[a-8]^m[a-14]^m[a-16];m[a]=c<<1|c>>>31}c=(l<<5|l>>>27)+j+m[a];c=20>a?c+((k&h|~k&g)+1518500249):40>a?c+((k^h^g)+1859775393):60>a?c+((k&h|k&g|h&g)-1894007588):c+((k^h^ 15 | g)-899497514);j=g;g=h;h=k<<30|k>>>2;k=l;l=c}b[0]=b[0]+l|0;b[1]=b[1]+k|0;b[2]=b[2]+h|0;b[3]=b[3]+g|0;b[4]=b[4]+j|0},_doFinalize:function(){var d=this._data,e=d.words,b=8*this._nDataBytes,l=8*d.sigBytes;e[l>>>5]|=128<<24-l%32;e[(l+64>>>9<<4)+14]=Math.floor(b/4294967296);e[(l+64>>>9<<4)+15]=b;d.sigBytes=4*e.length;this._process();return this._hash},clone:function(){var e=d.clone.call(this);e._hash=this._hash.clone();return e}});g.SHA1=d._createHelper(j);g.HmacSHA1=d._createHmacHelper(j)})(); 16 | (function(){var g=CryptoJS,j=g.enc.Utf8;g.algo.HMAC=g.lib.Base.extend({init:function(e,d){e=this._hasher=new e.init;"string"==typeof d&&(d=j.parse(d));var g=e.blockSize,n=4*g;d.sigBytes>n&&(d=e.finalize(d));d.clamp();for(var q=this._oKey=d.clone(),b=this._iKey=d.clone(),l=q.words,k=b.words,h=0;h 2 | 3 | 4 | 5 | 6 | 7 | Password Protected Page 8 | 115 | 116 | 117 | 118 |
119 |
120 |
121 |
This page is password protected.
122 |
123 |

Password

124 | 125 |
126 | 127 | Sorry, please try again. 128 | Sorry, something went wrong. 129 | Success! 130 |   131 | 132 | 133 |
134 |
135 |
136 |
137 |

138 | Sorry, but password protection only works over a secure connection. Please load this page via HTTPS. 139 |

140 |
141 |
142 |

143 | Your web browser appears to be outdated. Please visit this page using a modern browser. 144 |

145 |
146 |
147 |
148 |
149 |
150 | Protected by PageCrypt 151 |
152 | 274 | 275 | 276 | -------------------------------------------------------------------------------- /decryptTemplate.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | Password Protected Page 8 | 115 | 116 | 117 | 118 |
119 |
120 |
121 |
This page is password protected.
122 |
123 |

Password

124 | 125 |
126 | 127 | Sorry, please try again. 128 | Sorry, something went wrong. 129 | Success! 130 |   131 | 132 | 133 |
134 |
135 |
136 |
137 |

138 | Sorry, but password protection only works over a secure connection. Please load this page via HTTPS. 139 |

140 |
141 |
142 |

143 | Your web browser appears to be outdated. Please visit this page using a modern browser. 144 |

145 |
146 |
147 |
148 |
149 |
150 | Protected by PageCrypt 151 |
152 | 298 | 299 | 300 | -------------------------------------------------------------------------------- /legacy/index.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | PageCrypt - LEGACY VERSION 8 | 9 | 21 | 118 | 128 | 129 | 130 |
131 |
132 | <- to the latest version 133 |
134 |
135 |
136 |
137 | 138 |

PageCrypt - LEGACY VERSION

139 |

This is the LEGACY version of PageCrypt. It produces less strongly protected documents, but they work over insecure HTTP connections. For most use cases, use the latest version of PageCrypt.

140 |

Live Demo  (pssst... the live demo password is "hunter2")

141 |
142 |
143 |

Instructions

144 |

Step 1. Choose HTML file

145 |

Step 2. Choose password 146 |

147 |
148 |
Password:
149 |
150 |
151 |
Confirm:
152 |
153 |
154 |

Passwords don't match, try again.

155 |

Step 3. Protect!

156 |

Done! Check your downloads!

157 |

Step 4. Tip me?

Donate!

158 |

Suggested donation is $5 for personal use, or $10-20 for businesses. Honor system!

159 |
160 |
161 |
162 |
163 |
164 |

DISCLAIMER

165 |

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

166 |
167 |
168 | 169 | 170 | 171 | 172 | 271 | 272 | 273 | -------------------------------------------------------------------------------- /legacy/js/aes.js: -------------------------------------------------------------------------------- 1 | /* 2 | CryptoJS v3.1.2 3 | code.google.com/p/crypto-js 4 | (c) 2009-2013 by Jeff Mott. All rights reserved. 5 | code.google.com/p/crypto-js/wiki/License 6 | */ 7 | var CryptoJS=CryptoJS||function(u,p){var d={},l=d.lib={},s=function(){},t=l.Base={extend:function(a){s.prototype=this;var c=new s;a&&c.mixIn(a);c.hasOwnProperty("init")||(c.init=function(){c.$super.init.apply(this,arguments)});c.init.prototype=c;c.$super=this;return c},create:function(){var a=this.extend();a.init.apply(a,arguments);return a},init:function(){},mixIn:function(a){for(var c in a)a.hasOwnProperty(c)&&(this[c]=a[c]);a.hasOwnProperty("toString")&&(this.toString=a.toString)},clone:function(){return this.init.prototype.extend(this)}}, 8 | r=l.WordArray=t.extend({init:function(a,c){a=this.words=a||[];this.sigBytes=c!=p?c:4*a.length},toString:function(a){return(a||v).stringify(this)},concat:function(a){var c=this.words,e=a.words,j=this.sigBytes;a=a.sigBytes;this.clamp();if(j%4)for(var k=0;k>>2]|=(e[k>>>2]>>>24-8*(k%4)&255)<<24-8*((j+k)%4);else if(65535>>2]=e[k>>>2];else c.push.apply(c,e);this.sigBytes+=a;return this},clamp:function(){var a=this.words,c=this.sigBytes;a[c>>>2]&=4294967295<< 9 | 32-8*(c%4);a.length=u.ceil(c/4)},clone:function(){var a=t.clone.call(this);a.words=this.words.slice(0);return a},random:function(a){for(var c=[],e=0;e>>2]>>>24-8*(j%4)&255;e.push((k>>>4).toString(16));e.push((k&15).toString(16))}return e.join("")},parse:function(a){for(var c=a.length,e=[],j=0;j>>3]|=parseInt(a.substr(j, 10 | 2),16)<<24-4*(j%8);return new r.init(e,c/2)}},b=w.Latin1={stringify:function(a){var c=a.words;a=a.sigBytes;for(var e=[],j=0;j>>2]>>>24-8*(j%4)&255));return e.join("")},parse:function(a){for(var c=a.length,e=[],j=0;j>>2]|=(a.charCodeAt(j)&255)<<24-8*(j%4);return new r.init(e,c)}},x=w.Utf8={stringify:function(a){try{return decodeURIComponent(escape(b.stringify(a)))}catch(c){throw Error("Malformed UTF-8 data");}},parse:function(a){return b.parse(unescape(encodeURIComponent(a)))}}, 11 | q=l.BufferedBlockAlgorithm=t.extend({reset:function(){this._data=new r.init;this._nDataBytes=0},_append:function(a){"string"==typeof a&&(a=x.parse(a));this._data.concat(a);this._nDataBytes+=a.sigBytes},_process:function(a){var c=this._data,e=c.words,j=c.sigBytes,k=this.blockSize,b=j/(4*k),b=a?u.ceil(b):u.max((b|0)-this._minBufferSize,0);a=b*k;j=u.min(4*a,j);if(a){for(var q=0;q>>2]>>>24-8*(r%4)&255)<<16|(l[r+1>>>2]>>>24-8*((r+1)%4)&255)<<8|l[r+2>>>2]>>>24-8*((r+2)%4)&255,v=0;4>v&&r+0.75*v>>6*(3-v)&63));if(l=t.charAt(64))for(;d.length%4;)d.push(l);return d.join("")},parse:function(d){var l=d.length,s=this._map,t=s.charAt(64);t&&(t=d.indexOf(t),-1!=t&&(l=t));for(var t=[],r=0,w=0;w< 15 | l;w++)if(w%4){var v=s.indexOf(d.charAt(w-1))<<2*(w%4),b=s.indexOf(d.charAt(w))>>>6-2*(w%4);t[r>>>2]|=(v|b)<<24-8*(r%4);r++}return p.create(t,r)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="}})(); 16 | (function(u){function p(b,n,a,c,e,j,k){b=b+(n&a|~n&c)+e+k;return(b<>>32-j)+n}function d(b,n,a,c,e,j,k){b=b+(n&c|a&~c)+e+k;return(b<>>32-j)+n}function l(b,n,a,c,e,j,k){b=b+(n^a^c)+e+k;return(b<>>32-j)+n}function s(b,n,a,c,e,j,k){b=b+(a^(n|~c))+e+k;return(b<>>32-j)+n}for(var t=CryptoJS,r=t.lib,w=r.WordArray,v=r.Hasher,r=t.algo,b=[],x=0;64>x;x++)b[x]=4294967296*u.abs(u.sin(x+1))|0;r=r.MD5=v.extend({_doReset:function(){this._hash=new w.init([1732584193,4023233417,2562383102,271733878])}, 17 | _doProcessBlock:function(q,n){for(var a=0;16>a;a++){var c=n+a,e=q[c];q[c]=(e<<8|e>>>24)&16711935|(e<<24|e>>>8)&4278255360}var a=this._hash.words,c=q[n+0],e=q[n+1],j=q[n+2],k=q[n+3],z=q[n+4],r=q[n+5],t=q[n+6],w=q[n+7],v=q[n+8],A=q[n+9],B=q[n+10],C=q[n+11],u=q[n+12],D=q[n+13],E=q[n+14],x=q[n+15],f=a[0],m=a[1],g=a[2],h=a[3],f=p(f,m,g,h,c,7,b[0]),h=p(h,f,m,g,e,12,b[1]),g=p(g,h,f,m,j,17,b[2]),m=p(m,g,h,f,k,22,b[3]),f=p(f,m,g,h,z,7,b[4]),h=p(h,f,m,g,r,12,b[5]),g=p(g,h,f,m,t,17,b[6]),m=p(m,g,h,f,w,22,b[7]), 18 | f=p(f,m,g,h,v,7,b[8]),h=p(h,f,m,g,A,12,b[9]),g=p(g,h,f,m,B,17,b[10]),m=p(m,g,h,f,C,22,b[11]),f=p(f,m,g,h,u,7,b[12]),h=p(h,f,m,g,D,12,b[13]),g=p(g,h,f,m,E,17,b[14]),m=p(m,g,h,f,x,22,b[15]),f=d(f,m,g,h,e,5,b[16]),h=d(h,f,m,g,t,9,b[17]),g=d(g,h,f,m,C,14,b[18]),m=d(m,g,h,f,c,20,b[19]),f=d(f,m,g,h,r,5,b[20]),h=d(h,f,m,g,B,9,b[21]),g=d(g,h,f,m,x,14,b[22]),m=d(m,g,h,f,z,20,b[23]),f=d(f,m,g,h,A,5,b[24]),h=d(h,f,m,g,E,9,b[25]),g=d(g,h,f,m,k,14,b[26]),m=d(m,g,h,f,v,20,b[27]),f=d(f,m,g,h,D,5,b[28]),h=d(h,f, 19 | m,g,j,9,b[29]),g=d(g,h,f,m,w,14,b[30]),m=d(m,g,h,f,u,20,b[31]),f=l(f,m,g,h,r,4,b[32]),h=l(h,f,m,g,v,11,b[33]),g=l(g,h,f,m,C,16,b[34]),m=l(m,g,h,f,E,23,b[35]),f=l(f,m,g,h,e,4,b[36]),h=l(h,f,m,g,z,11,b[37]),g=l(g,h,f,m,w,16,b[38]),m=l(m,g,h,f,B,23,b[39]),f=l(f,m,g,h,D,4,b[40]),h=l(h,f,m,g,c,11,b[41]),g=l(g,h,f,m,k,16,b[42]),m=l(m,g,h,f,t,23,b[43]),f=l(f,m,g,h,A,4,b[44]),h=l(h,f,m,g,u,11,b[45]),g=l(g,h,f,m,x,16,b[46]),m=l(m,g,h,f,j,23,b[47]),f=s(f,m,g,h,c,6,b[48]),h=s(h,f,m,g,w,10,b[49]),g=s(g,h,f,m, 20 | E,15,b[50]),m=s(m,g,h,f,r,21,b[51]),f=s(f,m,g,h,u,6,b[52]),h=s(h,f,m,g,k,10,b[53]),g=s(g,h,f,m,B,15,b[54]),m=s(m,g,h,f,e,21,b[55]),f=s(f,m,g,h,v,6,b[56]),h=s(h,f,m,g,x,10,b[57]),g=s(g,h,f,m,t,15,b[58]),m=s(m,g,h,f,D,21,b[59]),f=s(f,m,g,h,z,6,b[60]),h=s(h,f,m,g,C,10,b[61]),g=s(g,h,f,m,j,15,b[62]),m=s(m,g,h,f,A,21,b[63]);a[0]=a[0]+f|0;a[1]=a[1]+m|0;a[2]=a[2]+g|0;a[3]=a[3]+h|0},_doFinalize:function(){var b=this._data,n=b.words,a=8*this._nDataBytes,c=8*b.sigBytes;n[c>>>5]|=128<<24-c%32;var e=u.floor(a/ 21 | 4294967296);n[(c+64>>>9<<4)+15]=(e<<8|e>>>24)&16711935|(e<<24|e>>>8)&4278255360;n[(c+64>>>9<<4)+14]=(a<<8|a>>>24)&16711935|(a<<24|a>>>8)&4278255360;b.sigBytes=4*(n.length+1);this._process();b=this._hash;n=b.words;for(a=0;4>a;a++)c=n[a],n[a]=(c<<8|c>>>24)&16711935|(c<<24|c>>>8)&4278255360;return b},clone:function(){var b=v.clone.call(this);b._hash=this._hash.clone();return b}});t.MD5=v._createHelper(r);t.HmacMD5=v._createHmacHelper(r)})(Math); 22 | (function(){var u=CryptoJS,p=u.lib,d=p.Base,l=p.WordArray,p=u.algo,s=p.EvpKDF=d.extend({cfg:d.extend({keySize:4,hasher:p.MD5,iterations:1}),init:function(d){this.cfg=this.cfg.extend(d)},compute:function(d,r){for(var p=this.cfg,s=p.hasher.create(),b=l.create(),u=b.words,q=p.keySize,p=p.iterations;u.length>>2]&255}};d.BlockCipher=v.extend({cfg:v.cfg.extend({mode:b,padding:q}),reset:function(){v.reset.call(this);var a=this.cfg,b=a.iv,a=a.mode;if(this._xformMode==this._ENC_XFORM_MODE)var c=a.createEncryptor;else c=a.createDecryptor,this._minBufferSize=1;this._mode=c.call(a, 28 | this,b&&b.words)},_doProcessBlock:function(a,b){this._mode.processBlock(a,b)},_doFinalize:function(){var a=this.cfg.padding;if(this._xformMode==this._ENC_XFORM_MODE){a.pad(this._data,this.blockSize);var b=this._process(!0)}else b=this._process(!0),a.unpad(b);return b},blockSize:4});var n=d.CipherParams=l.extend({init:function(a){this.mixIn(a)},toString:function(a){return(a||this.formatter).stringify(this)}}),b=(p.format={}).OpenSSL={stringify:function(a){var b=a.ciphertext;a=a.salt;return(a?s.create([1398893684, 29 | 1701076831]).concat(a).concat(b):b).toString(r)},parse:function(a){a=r.parse(a);var b=a.words;if(1398893684==b[0]&&1701076831==b[1]){var c=s.create(b.slice(2,4));b.splice(0,4);a.sigBytes-=16}return n.create({ciphertext:a,salt:c})}},a=d.SerializableCipher=l.extend({cfg:l.extend({format:b}),encrypt:function(a,b,c,d){d=this.cfg.extend(d);var l=a.createEncryptor(c,d);b=l.finalize(b);l=l.cfg;return n.create({ciphertext:b,key:c,iv:l.iv,algorithm:a,mode:l.mode,padding:l.padding,blockSize:a.blockSize,formatter:d.format})}, 30 | decrypt:function(a,b,c,d){d=this.cfg.extend(d);b=this._parse(b,d.format);return a.createDecryptor(c,d).finalize(b.ciphertext)},_parse:function(a,b){return"string"==typeof a?b.parse(a,this):a}}),p=(p.kdf={}).OpenSSL={execute:function(a,b,c,d){d||(d=s.random(8));a=w.create({keySize:b+c}).compute(a,d);c=s.create(a.words.slice(b),4*c);a.sigBytes=4*b;return n.create({key:a,iv:c,salt:d})}},c=d.PasswordBasedCipher=a.extend({cfg:a.cfg.extend({kdf:p}),encrypt:function(b,c,d,l){l=this.cfg.extend(l);d=l.kdf.execute(d, 31 | b.keySize,b.ivSize);l.iv=d.iv;b=a.encrypt.call(this,b,c,d.key,l);b.mixIn(d);return b},decrypt:function(b,c,d,l){l=this.cfg.extend(l);c=this._parse(c,l.format);d=l.kdf.execute(d,b.keySize,b.ivSize,c.salt);l.iv=d.iv;return a.decrypt.call(this,b,c,d.key,l)}})}(); 32 | (function(){for(var u=CryptoJS,p=u.lib.BlockCipher,d=u.algo,l=[],s=[],t=[],r=[],w=[],v=[],b=[],x=[],q=[],n=[],a=[],c=0;256>c;c++)a[c]=128>c?c<<1:c<<1^283;for(var e=0,j=0,c=0;256>c;c++){var k=j^j<<1^j<<2^j<<3^j<<4,k=k>>>8^k&255^99;l[e]=k;s[k]=e;var z=a[e],F=a[z],G=a[F],y=257*a[k]^16843008*k;t[e]=y<<24|y>>>8;r[e]=y<<16|y>>>16;w[e]=y<<8|y>>>24;v[e]=y;y=16843009*G^65537*F^257*z^16843008*e;b[k]=y<<24|y>>>8;x[k]=y<<16|y>>>16;q[k]=y<<8|y>>>24;n[k]=y;e?(e=z^a[a[a[G^z]]],j^=a[a[j]]):e=j=1}var H=[0,1,2,4,8, 33 | 16,32,64,128,27,54],d=d.AES=p.extend({_doReset:function(){for(var a=this._key,c=a.words,d=a.sigBytes/4,a=4*((this._nRounds=d+6)+1),e=this._keySchedule=[],j=0;j>>24]<<24|l[k>>>16&255]<<16|l[k>>>8&255]<<8|l[k&255]):(k=k<<8|k>>>24,k=l[k>>>24]<<24|l[k>>>16&255]<<16|l[k>>>8&255]<<8|l[k&255],k^=H[j/d|0]<<24);e[j]=e[j-d]^k}c=this._invKeySchedule=[];for(d=0;dd||4>=j?k:b[l[k>>>24]]^x[l[k>>>16&255]]^q[l[k>>> 34 | 8&255]]^n[l[k&255]]},encryptBlock:function(a,b){this._doCryptBlock(a,b,this._keySchedule,t,r,w,v,l)},decryptBlock:function(a,c){var d=a[c+1];a[c+1]=a[c+3];a[c+3]=d;this._doCryptBlock(a,c,this._invKeySchedule,b,x,q,n,s);d=a[c+1];a[c+1]=a[c+3];a[c+3]=d},_doCryptBlock:function(a,b,c,d,e,j,l,f){for(var m=this._nRounds,g=a[b]^c[0],h=a[b+1]^c[1],k=a[b+2]^c[2],n=a[b+3]^c[3],p=4,r=1;r>>24]^e[h>>>16&255]^j[k>>>8&255]^l[n&255]^c[p++],s=d[h>>>24]^e[k>>>16&255]^j[n>>>8&255]^l[g&255]^c[p++],t= 35 | d[k>>>24]^e[n>>>16&255]^j[g>>>8&255]^l[h&255]^c[p++],n=d[n>>>24]^e[g>>>16&255]^j[h>>>8&255]^l[k&255]^c[p++],g=q,h=s,k=t;q=(f[g>>>24]<<24|f[h>>>16&255]<<16|f[k>>>8&255]<<8|f[n&255])^c[p++];s=(f[h>>>24]<<24|f[k>>>16&255]<<16|f[n>>>8&255]<<8|f[g&255])^c[p++];t=(f[k>>>24]<<24|f[n>>>16&255]<<16|f[g>>>8&255]<<8|f[h&255])^c[p++];n=(f[n>>>24]<<24|f[g>>>16&255]<<16|f[h>>>8&255]<<8|f[k&255])^c[p++];a[b]=q;a[b+1]=s;a[b+2]=t;a[b+3]=n},keySize:8});u.AES=p._createHelper(d)})(); 36 | -------------------------------------------------------------------------------- /index.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | PageCrypt - Password Protect HTML 8 | 9 | 106 | 116 | 117 | 118 |
119 |
120 | <- home 121 |
122 |
123 |
124 |
125 | 126 |

PageCrypt - Password Protect HTML

127 |

This tool lets you securely password-protect an HTML file. Unlike other password-protection tools, this tool:

128 |
    129 |
  1. Has no server-side components (this tool and its password-protected pages run entirely in javascript).
    2. 130 |
  2. Uses strong encryption, so the password-protection cannot be bypassed.
    3. 131 |
132 |

All you need to do is choose an HTML file and a password, and your page will be password-protected.

133 |

Live Demo  (pssst... the live demo password is "hunter2")

134 |
135 |
136 |

Instructions

137 |

Step 1. Choose HTML file

138 |

Step 2. Choose password 139 |

140 |
141 |
Password:
142 |
143 |
144 |
Confirm:
145 |
146 |
147 |

Passwords don't match, try again.

148 |

Step 3. Protect!

149 |

Done! Check your downloads!

150 |

Step 4. Tip me?

Donate!

151 |

Suggested donation is $5 for personal use, or $10-20 for businesses. Honor system!

152 |
153 |
154 |
155 |
156 |
157 |

FAQ

158 |

Why do the resulting password-protected HTML documents only work when served via HTTPS?

159 |

Due to browser limitations, PageCrypt protected pages only work if served over a secure HTTPS connection (or if the .html file is opened directly from disk). This is because of some technical stuff involving SubtleCrypto and Secure Contexts. To produce html files that work over insecure HTTP connections, please use the legacy version of PageCrypt, which produces larger, less strongly protected documents.

160 |

How can this be secure if it's client-side? Can't people just bypass the password?

161 |

The HTML gets encrypted using the password, so it is unreadable without the password. An attacker could extract the encrypted document, but it would be an unusable mess until they decrypt it, which can only be done with the original password.

162 |

How do I know you're not keeping track of passwords I enter into this tool?

163 |

View the source code for this tool (in your browser and/or on GitHub) and you can see for yourself that the password never leaves your computer!

164 |

Why would I want to use this instead of a .htaccess user/password prompt?

165 |

Standard user/password prompts require you have some sort of privileged access to the server. With Apache for instance, you need to be able to add a .htaccess file to the directory you want to protect. Since this tool produces a standard HTML file, you can host it literally anywhere, even places that don't give you access to the server configuration.

166 |

This means you can use this tool to password-protect files without using .htaccess!

167 |

Does PageCrypt encrypt all the CSS/Javascript/Images or only the HTML itself?

168 |

This tool only encrypts the HTML document itself. If you inline your CSS/JS, or if you convert your images to data uris, then they will be encrypted too. Otherwise they will just be linked. Since the HTML itself is encrypted though, a visitor without the password will not be able see the URLs of any of the linked resources.

169 |

Can PageCrypt protect .pdf, .zip, or any other types of files?

170 |

PageCrypt is designed specifically to encrypt HTML. To encrypt other file types, I recommend Easy Encryption Everywhere by Michael D. Nahas.

171 |

What sort of crypto do you use?

172 |

This tool uses the SubtleCrypto JavaScript API for its encryption. First, an encryption key is derived from the password using PBKDF2 and a random salt with 100,000 rounds. Then the HTML is encrypted using AES256.

173 |

Is there a way to automate this or use it as a software library?

174 |

See Samuel Plumppu's rewrite of PageCrypt, which includes CLI and NPM automation, and NodeJS API support.

175 |

In addition, thanks to Zoltán Gálli for this tool's Python CLI, and thanks to Nial Francis for this tool's PowerShell CLI. Contributions welcome!

176 |

Finally, see Brent Scott's R-wrapper for PageCrypt. From the project page: "It is very common for R users to knit Rmarkdown documents to HTML docs. This provides an easy way to PageCrypt those documents without leaving R."

177 |
178 |
179 |
180 |

More Info

181 |

Project by Maximillian Laumeister. The source code and license are available on GitHub. 182 |

183 |
184 |
185 |

DISCLAIMER

186 |

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

187 |
188 |
189 | 190 | 191 | 331 | 332 | 333 | -------------------------------------------------------------------------------- /decryptTemplate-legacy.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | Password Protected Page 8 | 108 | 109 | 110 | 111 |
112 |
113 |
114 |
This page is password protected.
115 |
116 |

Password

117 | 118 |
119 | 120 | Sorry, please try again. 121 | Success! 122 |   123 | 124 | 125 |
126 |
127 |
128 |
129 |
130 |
131 |
132 | Protected by PageCrypt 133 |
134 | 171 | 192 | 266 | 325 | 326 | 327 | -------------------------------------------------------------------------------- /legacy/decryptTemplate.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | Password Protected Page 8 | 108 | 109 | 110 | 111 |
112 |
113 |
114 |
This page is password protected.
115 |
116 |

Password

117 | 118 |
119 | 120 | Sorry, please try again. 121 | Success! 122 |   123 | 124 | 125 |
126 |
127 |
128 |
129 |
130 |
131 |
132 | Protected by PageCrypt 133 |
134 | 171 | 192 | 266 | 325 | 326 | 327 | -------------------------------------------------------------------------------- /legacy/demopage/index.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | Password Protected Page 8 | 108 | 109 | 110 | 111 |
112 |
113 |
114 |
This page is password protected.
115 |
116 |

Password

117 | 118 |
119 | 120 | Sorry, please try again. 121 | Success! 122 |   123 | 124 | 125 |
126 |
127 |
128 |
129 |
130 |
131 |
132 | Protected by PageCrypt 133 |
134 | 171 | 192 | 266 | 325 | 326 | 327 | --------------------------------------------------------------------------------