Web Encoder
Protect your PHP in the browser
The Oxrion Encoder with nothing to install. Drop a folder, a ZIP or a PHP file, choose what to protect, and download the protected project.
encoder.oxrion.com · Free plan with 20 files a month
How it works
Three steps, about a minute
- Step 01
Paste your Encoder Token
Create a free account in the Oxrion Console and copy your Encoder Token. The free plan includes 20 files a month.
- Step 02
Drop your project
Drop a folder, a ZIP or a single PHP file, then pick the PHP files to protect. Your oxrion.ignore and oxrion.stamp are applied, as in the app.
- Step 03
Download the protected ZIP
The protected files come back and your project is rebuilt in the browser, with the same layout, ready to deploy with the free loader.
Privacy
What leaves your device
The Web Encoder works like Oxrion Desktop. Your project is read in your browser; the rest of it never leaves your device.
-
Only the PHP files you select
They go to the Encoder over an encrypted connection, with your options, and are protected in memory. Nothing is kept: not your source, not the protected output. Images, assets, configuration and every file you leave unchecked stay in your browser.
-
Nothing saved unless you ask
Closing the tab forgets your Encoder Token and keys. "Remember on this device" keeps the token and public keys in your browser only, and one click clears them. Server lock's external key is never saved.
-
No trackers on the page
The Web Encoder loads no analytics or third-party scripts, and a strict security policy only lets it talk to the Oxrion Encoder.
-
Keys you create stay with you
License and recovery keypairs are created in your browser, in the same format as Oxrion Desktop. The private key is shown once for you to save; it is never sent or stored. For the strongest protection of your keys, create them in Oxrion Desktop.
Same protection
Every option from the app
The Web Encoder and Oxrion Desktop use the same Encoder, so a file protected in one is identical to a file protected in the other. Server lock, License and Expiry need a paid plan or credits.
Server lock
Runs only on servers that hold your external key.
License
Runs only with a valid license for the customer's host.
Recovery
Lets you restore the source later, offline, with your own key.
Stamp
Embeds notes such as your company, website or a version.
Expiry
Stops the file from running after a date.
Web or Desktop?
One Encoder, two ways in
Use the Web Encoder to protect quickly, from any computer. Use Oxrion Desktop when you also issue licenses, recover source or keep your keys in one place.
| Feature | Web Encoder | Oxrion Desktop |
|---|---|---|
| Install | Nothing — runs in your browser | App for Windows, macOS and Linux |
| Protect a file, folder or ZIP | ||
| Every protection option | ||
| Licenser, License History, Email & Hooks | — | Yes, offline |
| Recovery | — | Yes, offline |
| Keys | Created in the browser, shown once | Kept in an encrypted Vault |
| Output | A ZIP download | A folder or a ZIP |
| Project size | Up to a few hundred MB | Any size |
| Encoder Token, plan and quota | The same | The same |
Questions
Web Encoder questions
Can't find what you're looking for? Reach out — we read every message.
-
Is the Web Encoder safe for my code?
It works like the app: your project is read in your browser, and only the PHP files you select and your options are sent to the Encoder over an encrypted connection. Files are protected in memory and returned; nothing is kept. The page loads no third-party scripts and, by default, saves nothing — closing the tab forgets your Encoder Token. Private keys you create there are never sent or stored.
-
What's the difference between the Web Encoder and Oxrion Desktop?
Both use the same Encoder, Encoder Token, quota and protection options, and protect files the same way. The Web Encoder only protects: it runs in your browser and gives you a ZIP. Oxrion Desktop also signs licenses, recovers source and keeps your keys in an encrypted Vault, all offline, and handles projects of any size.
-
Do you store my code on your servers?
No. Your files are processed in memory and the protected result is returned immediately — then everything is discarded. We don't keep your source, and we don't keep the protected output either. There is nothing on our side to leak, subpoena, or lose.
-
How many files can I protect?
Each plan includes a number of files per month — Free includes 20, and paid plans more. Protecting a file you already protected, unchanged, doesn't use quota again. Need more? Buy credits in the Oxrion Console at $0.10 per file: they never expire and unlock every option. Issuing licenses, recovery and the Vault are free and unlimited.
To run protected files: the free loader
Protected files run on any server with the free Oxrion loader — a small PHP extension, installed once. Supports PHP 8.1–8.5 on Linux and Windows.