How to Encrypt Files on a Chromebook Without Enabling Linux

Chromebooks are everywhere — in schools, in libraries, in budget-conscious offices, and in the hands of people who want a computer that just works. They are also the hardest devices to install software on, by design. The Linux container is great if it is enabled, but on most managed school Chromebooks it is disabled by policy. Android apps from the Play Store may also be locked. So how do you password-protect a file?

You use the browser. Chrome on Chromebook has the Web Crypto API built in, which means you can run AES-256 encryption directly in a tab without installing anything. The free file password protector on this site does exactly that.

The Steps

1. Open Chrome on your Chromebook (it is the only browser, but for the sake of completeness).
2. Visit the free file password protector.
3. Click the drop zone or drag a file from the Files app.
4. Enter a strong password — passphrases work well because Chromebook keyboards are good for typing words.
5. Click Encrypt & Download. The .enc file appears in your Downloads folder.

From there you can share the .enc file via Google Drive, Gmail, or any other Chromebook-supported channel. The recipient decrypts in their browser using the same tool.

Why This Matters for Schools

Many K-12 districts have moved to Chromebook-first deployments. Students and teachers handle FERPA-protected information — grades, discipline records, IEPs, parent communications — and most of those files are exchanged via Google Drive, where they are encrypted in transit and at rest by Google but not by the user.

For files that need an extra layer of protection (a draft of an IEP being shared with a parent, a student's medical accommodation form, sensitive grade data going to a co-teacher), client-side encryption adds a useful layer. The file is encrypted before it touches Google Drive, so even if the share link is leaked, the file is unreadable without the password.

Browser-based encryption fits the Chromebook environment perfectly because it requires zero IT involvement, no app whitelisting, no policy changes, and no installer.

Sell Custom Apparel — We Handle Printing & Free Shipping

Working with the Files App

Chrome OS's Files app integrates Google Drive, your Downloads folder, USB drives, and (if enabled) Linux files into one view. The encryption tool reads files from any of those sources — drag from the Files app, or click the drop zone and browse.

The .enc output file lands in Downloads by default. From there you can move it to Google Drive, attach it to Gmail, or copy it to a USB stick. All standard Chromebook file operations work normally on the encrypted file, because to the OS it is just a regular file with a .enc extension.

When to Use Linux Container Instead

If your Chromebook has the Linux container enabled and you are comfortable in a terminal, you can install GnuPG, OpenSSL, or VeraCrypt. Those tools are more powerful — they support batch processing, scripting, and integration into shell pipelines.

But for the everyday case of "I need to encrypt one file before sending it," the browser tool is faster and works on every Chromebook including the locked-down ones.

Sharing With Non-Chromebook Users

The recipient does not need a Chromebook. The .enc file decrypts in any modern browser — Safari on iPhone, Edge on Windows, Firefox on Linux, Chrome on Mac. They visit the same URL, drop the file in the Decrypt tab, and enter the password.

This is what makes the workflow especially useful in schools and small offices: the sender and recipient may be on completely different devices, and neither needs to install or buy anything.

Frequently Asked Questions

Does it work on managed school Chromebooks?

Yes. Web Crypto is part of Chrome and is not subject to extension or app policies. Even Chromebooks with the strictest student device management can run browser-based encryption.

Can I use Google Drive directly?

You can drag a file from your local Drive sync, encrypt it, then upload the .enc back to Drive. Google Drive does not currently let browser-based tools read directly from cloud Drive folders without download — but the workflow is fast either way.

Will the .enc file open on a Mac or PC?

Only after decryption. To decrypt, the recipient visits the same tool URL in any browser, drops the .enc file in, and enters the password. They get back the original file in its native format.