CLASSIFIED // DATA DESTRUCTION UTILITY
THIS APP IS FREE FOR EVERYONE TO USE. IT SHALL NOT BE SOLD, RENTED OR PACKAGED WITH ANY PRODUCT FOR PROFIT WITHOUT PRIOR AUTHORIZATION.
THIS APP OVERWRITES FILE DATA, PROCESSES DATA IN MEMORY WITH AES-256-GCM, THEN DELETES THE FILE
NO ENCRYPTED FILE COPY IS CREATED BY THE AES PROCESS
THE ORIGINAL FILE DATA IS OVERWRITTEN BEFORE DELETION
FINAL WORKING BUFFER IS CLEARED BEFORE RELEASE
STAND ALONE APP. NO INSTALLATION.
AKA "CRYPTO SHREDDER, FILE SHREDDER, RSA KEY SHREDDER, KEY SHREDDER"
BUILT BY SENG THAO @ THUGON.COM

FILE/DIRECTORY SHREDDER

Crypto Shredder is Windows software-based file shredding and secure deletion software that overwrites accessible file data before removal, processes its in-memory copy with AES-256-GCM, avoids creating an encrypted file copy, and records the processing activity.

01 / How it works

Software-Based File / Directory Shredding

Each selected file or directory is processed before removal. The application first loads the file into memory, overwrites the file's accessible contents with cryptographically generated random data, flushes and synchronizes the overwrite, processes the in-memory copy with AES-256-GCM, removes the overwritten file, and explicitly zeroes the final working buffer before releasing it. The original version was built to shred sensitive key files, cloud keys, APIs, confidential docs, and other sensitive files. This was to ensure that sensitive files are not easily recovered by unauthorized users. The final version included all files and directories deletions. The current versions were also used in healthcare industry for HIPAA and other requirements. Personal use was also adopted in 2025 and 2026 as well. Release FREE for everyone to use in 2026.

STEP 01

Overwrite the file

Before deletion, the file's accessible contents are replaced with cryptographically generated random data. The application flushes the write operation and calls the operating system's file synchronization mechanism so the overwrite is committed as reliably as the underlying storage system permits.

STEP 02

Process in memory, 3×

The application's in-memory copy is processed three times with AES-256-GCM. Each pass generates a new 256-bit key and a new nonce. The resulting AES data remains in memory and is not written back as an encrypted file. The encryption keys are not saved to persistent storage. This cryptographic processing is intentionally kept separate from the disk overwrite operation so the application does not create an additional encrypted file copy.

STEP 03

Delete the overwritten file

After the overwrite and synchronization steps, the application removes the file from the filesystem. The AES processing does not create a separate encrypted file on disk.

STEP 04

Clear the final working buffer

The final application working buffer is explicitly overwritten with zeros before it is released. This reduces the chance that sensitive data remains in that particular application buffer. Python and the operating system may manage additional temporary memory that the application cannot independently guarantee to sanitize.

02 / Audit & accountability

Audit & Accountability Reporting for IT & Compliance

Crypto Shredder provides software-based file shredding together with reporting output designed to support IT administration, security oversight, compliance documentation, Gaming Commission regulatory environments, business accountability, and audit workflows.

Destruction Activity Reporting

The application records operational details including the date and time, computer, Windows user, IP address, selected file or directory, and processing sequence. A session report can be exported as a text file for retention, review, accountability, and documentation.

REPORTING OUTPUT

  • Date and time of operation
  • Computer name
  • Windows user
  • IP address
  • File or directory processed
  • Processing sequence performed
  • Session-based activity records

ACCOUNTABILITY USE

  • IT administration records
  • Security documentation
  • Compliance workflows
  • Business data-disposal records
  • Gaming regulatory environments
  • Internal audit documentation
  • Operational accountability
=== CRYPTO SHRED LOG === DateTime: 2026-09-14 08:30:15 PC: WORKSTATION-01 User: Administrator IP: 192.168.1.100 File Deleted: C:\SensitiveData\example.pdf Process: file overwritten, AES-256-GCM processed in memory 3×, deleted, final buffer cleared --------------------------------------------------
audit report output — exported session records can be retained for review, accountability, and compliance documentation
The report documents the application's reported processing activity. It is an operational audit record and should not be represented as independent certification of physical media sanitization or proof that every possible copy of the data has been destroyed.
03 / Cryptographic processing

Cryptographic Processing Without Creating an Encrypted File Copy

Crypto Shredder intentionally keeps its AES-256-GCM processing in application memory rather than writing the encrypted result to persistent storage.

WHAT HAPPENS

  • Original file data is loaded into application memory
  • File contents are overwritten on disk with cryptographically generated random data
  • In-memory data is processed with AES-256-GCM
  • Each AES pass uses a newly generated 256-bit key and nonce
  • AES output remains in memory and is not saved as an encrypted file
  • Final working buffer is explicitly zeroed before release

WHY IT MATTERS

  • No separate encrypted output file is created by the AES process
  • Encryption keys are not saved to persistent storage
  • Cryptographic processing remains transient within the application
  • Original disk file is overwritten before deletion
  • Memory cleanup reduces persistence in the final application buffer
  • System-managed memory and pre-existing copies remain outside application control
04 / Security use

Built for IT, Security, Compliance & Regulatory Environments

Crypto Shredder provides software-based file shredding for Windows users who need more than ordinary file deletion. Selected file data is overwritten before removal. The application's in-memory copy is also processed with AES-256-GCM without intentionally creating a persistent encrypted copy on disk. The application then removes the overwritten file and maintains an operational record of the shredding activity.

IT ADMINISTRATION

  • Controlled file destruction
  • Windows workstation use
  • Destruction activity records
  • Exportable audit reports

SECURITY

  • Software-based file shredding
  • Random-data overwrite
  • AES-256-GCM processing
  • Operational reporting

COMPLIANCE & OVERSIGHT

  • File destruction activity logging
  • Audit and accountability reporting
  • Exportable destruction activity reports
  • User, computer, IP, date/time, and file-path records
  • IT compliance workflows
  • Security and audit documentation
  • Gaming regulatory environments
  • Business data disposal procedures

EVERYDAY USERS

  • Simple file selection
  • Directory selection
  • Confirmation before deletion
  • Optional activity report
05 / Limitations

Know What Software-Based Shredding Can and Cannot Do

Crypto Shredder is designed to perform software-based file destruction. Storage architecture and system configuration can affect what a software application can guarantee.

HDD / TRADITIONAL STORAGE

Software-based overwriting is meaningful on conventional magnetic storage because the application can write new data to the file's accessible storage locations before deletion.

SSD / NVMe

Solid-state storage uses controllers, flash translation layers, wear-leveling, garbage collection, and potentially overprovisioned storage. Software-based file overwriting cannot guarantee that every physical NAND cell containing previous data has been sanitized.

BACKUPS & SNAPSHOTS

Crypto Shredder does not control copies that may already exist in backups, snapshots, cloud synchronization systems, application recovery systems, virtual machines, or other storage locations.

SYSTEM-MANAGED DATA

Pagefiles, hibernation data, temporary files, caches, application recovery files, filesystem metadata, and other system-managed storage may contain copies or fragments that are outside the application's direct control.

Cryptographic processing limitation: Crypto Shredder does not intentionally create an encrypted file copy during its AES-256-GCM processing. However, the application cannot control copies that may already exist elsewhere, including backups, snapshots, cloud synchronization, temporary files, pagefile contents, hibernation data, virtual machines, application recovery files, or other system-managed storage.

Recovery Testing

Independent recovery testing can provide practical evidence about whether original file contents remain recoverable. In testing performed against shredded files, recovery software may identify file remnants while the original file contents are no longer present and recovered data consists of overwritten bytes. Such testing is evidence about the tested storage and recovery tools; it does not certify physical sanitization of every storage medium.

06 / Download

Crypto Shredder — Free Windows Edition

Crypto Shredder is a free Windows software-based file shredding and secure file deletion utility. Launch it, enter the password to continue, then select a file or folder through the standard Windows picker. Before deletion, accessible file contents are overwritten with cryptographically generated random data and synchronized through the operating system's file-writing mechanisms. The application's in-memory copy is processed three times with AES-256-GCM without creating an encrypted output file on disk. The overwritten file is then deleted and the final working buffer is explicitly zeroed before release. The application asks for confirmation before processing anything and can export a destruction activity log. Storage-media limitations apply: software-based file overwriting cannot guarantee physical sanitization on every storage architecture.

Free edition // Windows // Version 2.0.1

07 / Disclaimer

Responsible Use & Storage Limitations

Crypto Shredder permanently removes selected files from the filesystem after processing. Deletion operations are destructive and cannot be undone by this application.

Users are responsible for confirming that they have authorization to delete the selected files or directories.

Crypto Shredder provides no warranty or guarantee that every copy, backup, snapshot, cache, temporary file, VM block, cloud copy, filesystem remnant, or physical storage cell containing information associated with a deleted file has been destroyed.

Software-based overwriting is subject to the characteristics and behavior of the underlying storage device.

The audit/reporting output documents the application's reported processing activity. It should not be interpreted as independent certification of physical media sanitization or regulatory compliance.

Use Crypto Shredder only when you understand and accept the consequences of permanent data deletion.