TextEncrypt

Password-Based Text Encryption for Google Docs™

🔒 PBKDF2 Encryption 🛡️ HMAC Integrity ⏱️ 6-Hour Sessions 🔑 Text-Specific Keys 👁️ Reader Protection

Before & After Encryption:

TextEncrypt Before Preview

⚠️ IMPORTANT: Understanding Protection Scope

What TextEncrypt Protects:

  • ✓ Hides content from READERS (read-only access)
  • ✓ Protects exported/downloaded document copies
  • ✓ Secures current text values in screenshots

Critical Limitation:

  • ⚠️ Users with EDITOR access can ALWAYS view edit history
  • ⚠️ Original unencrypted text visible in version history
  • ⚠️ Only grant editor access to fully trusted users
  • ⚠️ Only the document OWNER can encrypt/decrypt text

Recommendation: Use TextEncrypt for reader privacy. This is protection designed for controlling who can see data in VIEW mode, not for securing data from editors.

Key Security Features

🔐

Password-Based Encryption

PBKDF2 key derivation with 10,000 rounds ensures strong password-based protection. No stored keys - only you know the password.

🆔

Text-Specific Keys

Each text segment gets a unique encryption key derived from your password plus a UUID. Same password, different keys per segment.

✓

HMAC Integrity Verification

Every encrypted text includes an HMAC signature to detect tampering or incorrect passwords during decryption.

⏱️

Session Password Caching

Enter your password once and work for 6 hours. Cache automatically expires, or manually end session anytime.

🎨

Highlight Features

Highlight all [ENCRYPTED] markers in your document with red text and pink background for easy identification. Remove highlights anytime.

🧹

Orphan Data Cleanup

Built-in cleanup tool removes encrypted data for deleted text, keeping your storage efficient and organized.

How TextEncrypt Works

Installation

  1. Open your Google Docs™ document
  2. Navigate to Extensions → Add-ons → Get add-ons
  3. Search for "TextEncrypt"
  4. Click Install and authorize the required permissions
  5. Refresh your document to see the TextEncrypt menu

🌐 View on Google Workspace Marketplace

Or visit directly:

Encrypting Text (Owner Only)

  1. Select the text containing sensitive data
  2. Click TextEncrypt → 🔒 Encrypt Selected Text
  3. Read and accept the editor limitation warning (first-time only)
  4. Enter your encryption password (minimum 8 characters recommended)
  5. Password is cached for 6 hours for convenience
  6. Text will display [ENCRYPTED] - original data stored securely

Decrypting Text (Owner Only)

  1. Select text showing [ENCRYPTED]
  2. Click TextEncrypt → 🔓 Decrypt Selected Text
  3. If password cached, it's used automatically (or enter manually)
  4. Original text values will be restored
  5. Encrypted data removed from storage automatically

🔑 Password Management

Critical: Your password is NOT stored permanently. If you forget your password, you can only recover clear text from change history.

Password Session Features:

  • Password cached for 6 HOURS after first entry
  • No need to re-enter during active session
  • Use 🚪 End Password Session to logout manually
  • Session expires automatically after 6 hours

Tips:

  • Use a strong, memorable password (8+ characters recommended)
  • Store your password securely (password manager)
  • Only document owner can encrypt/decrypt text

🎯 Free Trial & Licensing

🆓 30-Day Free Trial

Start using TextEncrypt immediately with full features!
No payment required. No credit card needed.

Feature Free Trial (30 Days) After Trial / Free Forever Premium License
Encryption ✓ Unlimited ✗ Locked ✓ Unlimited
Decryption ✓ Unlimited ✓ FREE Forever ✓ Unlimited
Storage Limit 10 MB 10 MB 10 MB
Password Sessions ✓ 6 hours ✓ 6 hours ✓ 6 hours
Highlight Features ✓ ✓ ✓
Cleanup Tools ✓ ✓ ✓
License Duration 30 Days - 1 Year
Cost FREE FREE (Decryption Only) From $1 USD (one-time)

💡 How the Licensing Model Works

TextEncrypt uses a fair, user-friendly licensing model:

  • Free Trial: 30 days of full encryption + decryption access
  • After Trial: Decryption remains FREE forever - you never lose access to your encrypted data
  • Premium License: Unlocks encryption again for 1 year
  • Storage: Full 10 MB available to all users, trial and premium

☕ Get Your Premium License

Support TextEncrypt development with any amount starting from $1 USD (one-time payment) and unlock unlimited encryption with a 1-year license!

☕ Support on Buy Me a Coffee

How it works:
1. Support with any amount ($1+) using your Google email
2. Wait 2-5 minutes for webhook processing
3. Get your license from bmc.numbrate.com
4. Activate in TextEncrypt → 🎫 Enter License Key
5. Enjoy unlimited encryption for 1 year!

Note: All users get 10 MB storage. Use TextEncrypt → Show Storage Usage to monitor your usage. Premium license only unlocks encryption - decryption is always FREE!

Technical Security Details

Encryption Implementation

Key Derivation

Algorithm: PBKDF2-like with SHA-256

Rounds: 10,000 iterations (master) + 100 (per-segment)

Salt: Unique per document

Segment Keys: Master key + UUID per segment

Encryption Method

Cipher: Block-based stream cipher

IV: Random 16-byte initialization vector

Block Size: 32 bytes (SHA-256)

Format: V3:IV:Encrypted|HMAC|Signature

Data Integrity

Method: HMAC-SHA256

Verification: Constant-time comparison

Tampering: Detected before decryption

Version: V3 protocol identifier

Data Storage

Encrypted data is stored in Google Apps Script Properties (inaccessible to readers). Text metadata uses hidden identifiers to track encrypted segments. All storage is within Google's infrastructure - no external servers.

Session Security

Password cached in CacheService (user-specific, 6-hour expiration). Session keys cleared after each operation. No persistent storage of passwords or derived keys. Only document owner can perform encryption/decryption operations.

Frequently Asked Questions

How do I get a Premium license after my trial ends?
Visit buymeacoffee.com/numbrate and support with any amount starting from $1 USD. Important: Use the same email address that you use with Google Docs. After 2-5 minutes, retrieve your license key from bmc.numbrate.com and activate it in TextEncrypt → 🎫 Enter License Key. This will unlock unlimited encryption for 1 year. (Note: Decryption is always FREE, and all users get 10 MB storage)
Can editors see my encrypted data?
Editors can see the current encrypted state (text shows [ENCRYPTED]), but NOT the original content - unless they check edit history. Important: Google Docs version history will show all previous values including unencrypted data. Only share editor access with fully trusted users.
What happens if I forget my password?
Encrypted data can only be recovered from history without the correct password. TextEncrypt uses password-based encryption with no backup recovery mechanism. Always store your password securely in a password manager.
How long does the password session last?
Password sessions last 6 hours from the time you enter your password. During this time, you can encrypt/decrypt without re-entering the password. Use TextEncrypt → End Password Session to manually clear the cache earlier.
Is encrypted data stored on external servers?
No. All encrypted data is stored in Google Apps Script Properties within your document. No data is transmitted to external servers. Everything stays within Google's infrastructure.
What happens to encrypted data when I delete text?
Deleting text leaves "orphaned" encrypted data in storage. Use TextEncrypt → Clean Up Orphaned Data to scan and remove encrypted data for deleted text, freeing up storage space.
Can multiple users encrypt different text with different passwords?
Only the document owner (the person who first installed TextEncrypt) can encrypt/decrypt text. This prevents conflicts and ensures consistent password management. Other users can view but not modify encrypted content.
Does TextEncrypt work offline?
TextEncrypt requires an internet connection as it runs through Google Apps Script. All encryption/decryption happens server-side within Google's infrastructure for security and consistency.
How do I check my storage usage?
Click TextEncrypt → Show Storage Usage to see your current usage, percentage of limit, number of encrypted segments, and remaining space. You'll receive warnings when approaching 80% capacity.
Can I use different passwords for different text segments?
Yes, Add-on does not store password anywhere centrally other than 6 hours temporary caching. So it is suggested to use same password always otherwise you should keep track of segment passwords with different UID's later to decrypt.

Professional Use Cases

Confidential Documents

Protect sensitive sections in contracts, agreements, and legal documents from readers while maintaining document collaboration with trusted staff.

Personal Information

Secure personal data, contact details, and confidential notes in shared documents with family or colleagues.

Business Plans

Encrypt financial projections, strategic details, and proprietary information in business documents shared with stakeholders.

Research Notes

Protect participant data, confidential findings, and sensitive research information while collaborating with research teams.

Meeting Minutes

Secure confidential discussions, personnel matters, and strategic decisions in shared meeting documents.

Project Documentation

Protect API keys, passwords, and sensitive technical details in project documentation shared with team members.

Protect Your Data Today

Start encrypting and securing sensitive text in your documents.

Get License Key
Terms of Service Privacy Policy

TextEncrypt: Professional Google Docs Text Encryption Add-on

TextEncrypt is a professional password-based encryption add-on for Google Docs that provides text-level data protection using PBKDF2 encryption with HMAC integrity verification. This Google Workspace Marketplace add-on allows document owners to encrypt sensitive text with password protection, preventing readers from accessing confidential information while maintaining collaboration capabilities.

Key Features and Capabilities

Password-based encryption using PBKDF2 algorithm with 10,000 iteration rounds for strong cryptographic security. Each text segment receives unique encryption keys derived from user password combined with UUID identifiers. HMAC-SHA256 integrity verification ensures data tampering detection. Six-hour session caching eliminates repeated password entry. Batch processing supports encrypting multiple text segments simultaneously with progress tracking. Orphan data cleanup tools maintain efficient storage management.

Security Implementation

TextEncrypt implements military-grade encryption for Google Docs using PBKDF2 key derivation with SHA-256 hashing. Block-based stream cipher with random 16-byte initialization vectors. Constant-time HMAC comparison prevents timing attacks. All encrypted data stored in Google Apps Script Properties within Google infrastructure. No external servers involved ensuring complete data sovereignty.

Use Cases and Applications

Ideal for confidential document protection including contracts and legal agreements. Personal information security with encrypted contact details and notes. Business plan protection with encrypted financial projections and strategic information. Research data protection for participant data and confidential findings. Meeting minutes security for confidential discussions and personnel matters. Project documentation protection for API keys and sensitive technical details.

Storage and Licensing

Free 30-day trial includes full encryption and decryption with 10 MB storage. All users get 10 MB storage capacity regardless of license status. After trial expires decryption remains FREE forever while encryption requires premium license. Premium license offers unlimited encryption for one-year duration. Upgrade starting from 1 USD one-time payment through Buy Me a Coffee integration. Webhook API verification system for automatic license activation within 2-5 minutes.

Technical Specifications

V3 encryption protocol with format V3:IV:Encrypted|HMAC|Signature. Master key derivation with 10,000 iterations plus 100 iterations per segment. Unique salt per document. Random initialization vectors for each encryption operation. Server-side processing through Google Apps Script requiring internet connection. Owner-only encryption permissions preventing unauthorized access.

Privacy and Security Considerations

TextEncrypt protects data from readers and read-only users. Editor access limitations: users with editor permissions can view version history containing unencrypted values. Only grant editor access to fully trusted users. Document owner exclusively controls encryption and decryption operations. No password recovery mechanism available - forgotten passwords require history restoration. Session security with user-specific cache expiration after six hours.

Installation and Setup

Available on Google Workspace Marketplace. Installation through Extensions menu in Google Docs. Requires authorization for Google Apps Script Properties access. Automatic menu integration after installation. First-time setup includes editor limitation warning acceptance. Minimum recommended password length of 8 characters for optimal security.

Common Questions and Answers

How does TextEncrypt differ from document-level protection? TextEncrypt provides cryptographic encryption at text level versus access control permissions. Can multiple users encrypt with different passwords? Only document owner can encrypt decrypt ensuring consistent password management. What happens when text is deleted? Orphaned encrypted data remains until cleanup tool execution. Is offline usage supported? Requires internet connection for server-side Google Apps Script execution.

Compatibility and Integration

Compatible with all Google Docs documents in Google Workspace and personal Google accounts. Works with desktop browsers including Chrome Firefox Safari Edge. Mobile app support through Google Docs mobile applications. Integration with Google Drive file sharing permissions. Maintains compatibility with Google Docs native features like formatting and styling on encrypted text showing [ENCRYPTED] placeholder text.

Performance and Optimization

Optimized batch processing for multiple text segments with progress indicators. Efficient storage calculation based on encrypted data size. Real-time storage usage monitoring through Show Storage Usage feature. Automatic warning notifications at 80% capacity threshold. Session-based password caching reduces cryptographic operation overhead during active usage periods.

Support and Documentation

Technical support available through numbrate@gmail.com email. Comprehensive documentation covering installation encryption decryption procedures. FAQ section addressing common use cases and troubleshooting. Premium support included with paid license upgrades. Regular updates and security patches through Google Workspace Marketplace automatic distribution.