Passphrase encryption.
Encryption with nothing but a password. age's passphrase mode derives the file key from your passphrase with scrypt — ideal for encrypting something to yourself when you do not want to manage keys.
Passphrase encryption is age's symmetric mode: instead of a public-key recipient, the file is locked with a password and a scrypt-derived key. Anyone with the passphrase can decrypt.
What it is
You pick a passphrase; age runs it through scrypt to derive the key that protects the file. Decryption asks for the same passphrase. There are no keys to generate, store, or back up.
Why it matters
It is the simplest possible flow and perfect for personal archives or moving a file across your own devices. The security ceiling is your passphrase strength, so use a long one. For sharing with others, key-based recipients are usually a better fit.
Related terms
Common questions.
Is this less secure than key mode?
The cryptography is equally strong; the weak point is a guessable passphrase. Long passphrases close that gap.
Is it compatible with the CLI?
Yes — these are standard age -p files.
Get AgePony
Free file encryption for iOS and Android. No accounts, no tracking, no servers.