# Age-like Encrypted File Bundle Encrypt or decrypt portable password-based file bundles with Argon2id, XChaCha20-Poly1305, and optional signatures > Canonical page: https://elysiatools.com/en/tools/age-like-encrypted-file-bundle - **Category:** Security - **Keywords:** age-like, encrypted file bundle, argon2id, xchacha20-poly1305, passphrase encryption, file signing ## Overview AGEX v1 wraps a file into a self-describing password-based bundle. It stores version metadata, Argon2id settings, and XChaCha20-Poly1305 ciphertext so you can move the bundle elsewhere and decrypt it later. Optional Ed25519 signing helps confirm who produced the bundle. ## Inputs - **Operation** (select) - **Source File** (file) - **Bundle File** (file) - **Passphrase** (text): Enter a passphrase with at least 8 characters - **Strength** (select) - **Include Signature** (checkbox) - **Signer ID** (text): Optional signer label, e.g. ops-key-1 - **Signer Private Key** (textarea): Optional base64 Ed25519 secret key. Leave blank to auto-generate when signing. - **Signer Public Key** (textarea): Optional base64 Ed25519 public key for signature verification during decrypt ## When to use - When you need to securely share a sensitive file over untrusted channels using a strong, password-derived key. - When archiving local backups that require high-grade encryption parameters like Argon2id and XChaCha20-Poly1305. - When you want to verify the origin and integrity of an encrypted file bundle using Ed25519 public key signatures. ## How it works - Select the operation (Encrypt or Decrypt) and upload your source file or existing AGEX bundle file. - Provide a passphrase and choose the Argon2id strength level to control key derivation hardness. - Optionally enable Ed25519 signing by providing or auto-generating a private key to sign the bundle. - Run the tool to generate a self-describing JSON bundle containing the ciphertext, metadata, and optional signature, or to decrypt and verify an existing bundle. ## Use cases - Encrypting database backups before uploading them to public cloud storage providers. - Signing and encrypting software update binaries for distribution to remote servers. - Exchanging confidential documents between team members using a pre-shared passphrase. ## Frequently asked questions ### What encryption algorithms does this tool use? It uses Argon2id for password hashing and key derivation, and XChaCha20-Poly1305 for symmetric file encryption. ### What is the purpose of the optional signature? The Ed25519 signature allows the recipient to verify the identity of the sender and confirm the bundle has not been tampered with. ### What are the differences between the strength levels? The strength levels (interactive, moderate, sensitive) adjust the Argon2id memory and CPU limits, making password-cracking attempts progressively harder. ### Can I decrypt a bundle without the original public key? Yes, you can decrypt the file using only the passphrase, but you will not be able to verify the sender's signature without the public key. ### Is the output bundle format compatible with standard age? No, this tool uses the AGEX v1 format, which wraps the ciphertext and metadata into a self-describing JSON structure. ## Related tools - [AGEX Bundle Rewrapper](https://elysiatools.com/en/tools/agex-bundle-rewrapper): Re-encrypt an AGEX bundle with a new passphrase and fresh Argon2id/XChaCha parameters - [AGEX Bundle Diff](https://elysiatools.com/en/tools/agex-bundle-diff): Compare two AGEX bundles and highlight metadata or protection-setting differences - [AGEX Bundle Inspector](https://elysiatools.com/en/tools/agex-bundle-inspector): Inspect AGEX bundle metadata without decrypting the file contents - [AGEX Secure Share Note](https://elysiatools.com/en/tools/agex-secure-share-note): Generate a plain-language share note for an AGEX bundle so recipients know how to decrypt and verify it safely - [2026 PDF Calendar Designer](https://elysiatools.com/en/tools/pdf-2026-calendar-designer): Design and export stylish 2026 printable PDF calendars with bimonthly, quarterly, semiannual, or annual single-page layouts - [PDF Form Fill Batch](https://elysiatools.com/en/tools/pdf-form-fill-batch): Fill one PDF form template with an array of records and output one filled PDF per record (ZIP) or a merged PDF - [SBOM SPDX CycloneDX License Policy Auditor](https://elysiatools.com/en/tools/sbom-spdx-cyclonedx-license-policy-auditor): Audit SPDX 2.3 or CycloneDX 1.5 component licenses and emit SARIF with failing dependency paths - [Time Series Anomaly Detector](https://elysiatools.com/en/tools/time-series-anomaly-detector): Upload CSV or JSON time series data, detect anomalies with Z-Score and IQR methods, and return a chart-backed report ## Samples - [Distributed Tracing Samples](https://elysiatools.com/en/samples/distributed-tracing-samples): Comprehensive distributed tracing examples using Jaeger, OpenTelemetry, and other modern observability tools for microservices architecture - [AWS EventBridge Samples](https://elysiatools.com/en/samples/eventbridge-samples): AWS EventBridge examples including event buses, rules, targets, schema registry, custom events, and cross-account event routing for serverless event-driven architecture - [JWT Samples](https://elysiatools.com/en/samples/jwt-samples): Comprehensive JWT examples from basic token structure to advanced security implementations - [PDF Samples](https://elysiatools.com/en/samples/pdf-samples): Generated PDF samples from tools dated 2026-02-01 to 2026-02-10 ## Related content - [AGEX Secure File Packaging and Handoff](https://elysiatools.com/en/hubs/agex-secure-file-sharing): Package a file as AGEX, inspect visible metadata, choose passphrase and signature settings, and verify the handoff before delivery.