AES-256 file encryption
Strong locks wrap file and folder bytes in AES-256-GCM. The item password — not the master password — unlocks the package.
AES
256
Local desktop locker · No cloud
Your Files.
Your Key.
File and folder lock for Windows, Mac, and Linux
Lockey is a local desktop locker: password-protect files and folders on this computer. Strong locks encrypt into a .lockey package with AES-256-GCM, so the same key is required even after you copy them. Nothing is uploaded.
Windows 64-bit (x64) and Linux x86_64 (amd64) installers. macOS coming soon.
A local file and folder lock
Password-protect real files and folders on this computer. The vault stays local. Copies stay locked if you used a Strong package.
Folder lock with no cloud
The vault, recovery answers, and files stay on the machine where you installed Lockey. There is no Lockey account and nothing is uploaded.
Password-protect each file
Each lock has its own item password. After master login, this computer can show passwords saved in the local vault.
Lock folders from Finder on Mac
Right-click Lock or Unlock with Lockey, or double-click a .lockey package. Windows Explorer and Linux file-manager menus are not shipping yet.
File lock for Windows, Mac, and Linux
One desktop locker. Current installers are Windows 64-bit (x64) and Linux x86_64 (amd64). macOS is not posted yet.
Folder lock for Windows desktop
Lock files and folders on 64-bit Windows 10 and 11 (x64) from the Lockey dashboard. Strong locks write a password-protected .lockey package that stays encrypted if you copy it. Explorer context menus are not included yet.
Folder lock for Mac
On macOS 12+ (Apple silicon or Intel), lock a file or folder from the app or from Finder. The macOS installer is not posted yet. The vault is not stored in iCloud.
File lock for Linux
Run the desktop dashboard on 64-bit x86_64 (amd64) Linux. The current download is a .deb for Debian and Ubuntu. ARM64 and file-manager menus are not posted yet.
Two protection modes
New locks default to Strong. You can still pick a light permission lock per item.
Strong — encrypted package
The item becomes a .lockey package. Copy it anywhere; opening still needs the original item password. Administrators cannot read the bytes while it is locked.
Light — permission lock
Removes Finder read permission. This is not encryption. The owner, admins, and many copies can bypass it. Use Strong when the file may leave this Mac.
How the desktop locker works
Set up once. Then lock real files and folders from the dashboard on this computer.
1
Install and set a master
Create a master password for this computer and pick recovery questions. The dashboard stays locked until you sign in.
2
Lock a file or folder
Pick a file or folder, choose Strong or Light, and set an item password. Strong writes an encrypted .lockey package.
3
Unlock with your key
Open from the app or, on macOS, from Finder. The item password is required. The master password is not the file key.
Technical specifications & security architecture
Cryptographic guarantees and architecture designed for zero cloud reliance and absolute local privacy.
Authenticated Galois/Counter Mode encryption. Guarantees confidentiality and cryptographic integrity verification against data tampering.
Memory-hard password hashing resistant to GPU and ASIC brute-force attacks. Applies unique per-item cryptographic salts.
Integrates with Windows Credential Manager and macOS Keychain to mix an operating-system secret pepper into authentication verifiers.
Portable encrypted package format holding ciphertext, payload metadata, and authentication tags. Copies stay locked anywhere they move.
Zero remote servers, zero account sign-ins, and zero cloud backups. Your sensitive data, vault keys, and passwords never leave this computer.
No tracking SDKs, no behavioral telemetry, and no network pingbacks. Absolute privacy by architectural design.
Native binaries for 64-bit Windows 10/11 and Debian/Ubuntu Linux x86_64. Universal macOS build in active development.
Free download for personal and business desktop privacy provided by ENTEROPIA LLP. No recurring subscriptions or paywalls.
| Security & Architecture | Lockey Desktop Locker | Cloud Lockers (OneDrive / Dropbox) | Archive Tools (7-Zip / WinRAR) |
|---|---|---|---|
| Storage Location | 100% Local on your disk | Remote third-party cloud servers | Local on your disk |
| Encryption Cipher | AES-256-GCM (Authenticated) | Server-managed or client-side sync | AES-256 / ZipCrypto |
| Password Architecture | Per-item passwords + Master vault | Single account password + 2FA | Password per archive file |
| Cloud Account Required | None (Offline utility) | Mandatory subscription account | None |
| OS Keyring Pepper | Yes (Credential Manager / Keychain) | No | No |
| Dedicated Locker Dashboard | Yes (status tracking & password catalog) | Cloud web console | No (generic file browser) |
| Telemetry & Tracking | 0 bytes collected (Zero telemetry) | Extensive server request logging | None |
File and folder lock questions
Straight answers for people looking for a desktop locker, not a cloud drive.
What is the best folder lock for a Windows desktop?
Lockey is the best offline folder lock for Windows 10 and 11 (64-bit x64).
If you want a folder lock for Windows that stays on this computer, look for a local desktop locker rather than a cloud drive. Lockey is a desktop file and folder lock for 64-bit Windows 10 and 11 (x64): you set an item password, Strong locks encrypt into a .lockey package with AES-256-GCM, and the vault is not uploaded. Windows Explorer right-click menus are not included yet — lock and unlock from the Lockey dashboard.
How do I password-protect a folder in Windows 11 without cloud software?
To password-protect a folder in Windows 11 without cloud software, install Lockey, click Add Lock, choose your folder, set a unique item password, and select Strong mode.
Lockey creates an encrypted .lockey package directly on your hard drive with AES-256-GCM authenticated encryption. Your vault stays on your PC and no Microsoft, OneDrive, or third-party cloud account is needed.
What is a .lockey file and how do I open it?
A .lockey file is an authenticated AES-256-GCM encrypted package created by Lockey.
It packages the encrypted file or folder bytes along with an authentication tag and Argon2id key-derivation parameters. To open it, launch Lockey, select the item, and enter the unique item password you set when locking it.
How do I password-protect files and folders on Mac without iCloud?
Lockey is a local folder lock for Mac that keeps all encrypted files completely out of iCloud.
After you set a master password for this computer, you can lock a file or folder from the dashboard or from Finder (Lock / Unlock with Lockey). Strong mode writes an encrypted .lockey package. Nothing is sent to iCloud or to ENTEROPIA LLP.
Is there a file lock app for Linux desktops?
Yes, Lockey provides a native 64-bit x86_64 (amd64) .deb package for Debian and Ubuntu.
You can lock files and folders with a unique item password. File-manager menus and ARM64 builds are not posted yet, so locking is done in the app. The vault stays on that Linux machine.
Which CPU architectures does Lockey support?
Lockey currently supports 64-bit x64 on Windows 10/11 and 64-bit x86_64 (amd64) on Linux.
The posted Windows installer is 64-bit (x64) for Windows 10 and 11. The posted Linux installer is 64-bit x86_64 (amd64) as a Debian package. macOS, Windows ARM, and Linux ARM64 installers are not posted yet.
Does Lockey upload my files to the cloud?
No. Lockey is a 100% local, offline desktop locker with zero cloud connectivity.
Files, master password, item passwords, recovery answers, and the vault stay on the computer where you installed the app. There is no Lockey cloud account.
How does Lockey differ from BitLocker or 7-Zip?
BitLocker unlocks entire drives on boot, leaving files exposed during active sessions, while 7-Zip lacks a persistent locker interface.
Lockey is a dedicated per-file and per-folder locker: you lock specific directories with unique item passwords, keep a searchable local vault catalog, and choose between Strong AES-256-GCM container encryption and instantaneous permission locks.
Is Lockey free to download and use?
Yes, Lockey is free to download and use for desktop file and folder encryption on Windows and Linux.
There are no subscriptions, in-app purchases, or cloud storage upsells. It is provided by ENTEROPIA LLP as a standalone desktop utility.
Can I recover a locked file if I forget the password?
A forgotten Strong item password cannot be recovered from the .lockey package because Lockey is zero-knowledge.
After you sign in with the master password, this computer can show item passwords that were saved in the local vault. Keep the item password if the package may leave this PC.
What is the difference between Strong encryption and a Light folder lock?
Strong mode encrypts bytes into an AES-256-GCM .lockey package; Light mode is an OS permission lock.
Strong mode encrypts the item into a .lockey package with AES-256-GCM. Copies still need the original item password. Light mode is a permission lock (Finder read permission on Mac). It is not encryption, and the owner, admins, or many copies can bypass it. Use Strong when the file may leave this computer.
Download the desktop file locker
Lockey 0.1.0 · Windows 64-bit (x64) and Linux x86_64 (amd64)
Loading downloads…
Current builds: Windows 64-bit (x64) and Linux x86_64 (amd64). macOS and ARM64 installers are not posted yet. Lockey is a product of ENTEROPIA LLP. The dashboard never stores your item files in the cloud. Keep the item password; a forgotten Strong password cannot be recovered from the package.