================================================================================
  DataLocker — AES File Encryption for Windows
  Version 1.0
================================================================================

  WHAT IS DATALOCKER?
  -------------------
  DataLocker encrypts your files locally using AES-128-CBC (the same NIST-
  approved standard used by governments for classified data), combined with
  HMAC-SHA256 for tamper detection and PBKDF2-SHA256 with 600,000 iterations
  for key derivation. No cloud, no accounts, no tracking.

  Right-click any file or folder and select "Lock with DataLocker" to encrypt
  it instantly with your master password.


  SYSTEM REQUIREMENTS
  -------------------
  - Windows 10 or Windows 11 (64-bit)
  - Python 3.10 or later (64-bit)
  - Approximately 50 MB of disk space


  INSTALLATION
  ------------
  1. Install Python 3.10+ from https://www.python.org/downloads/
     IMPORTANT: Check "Add Python to PATH" during installation.

  2. Open a terminal (Command Prompt or PowerShell) and run:

       pip install customtkinter cryptography Pillow

  3. Navigate to the DataLocker folder and run:

       python app.py

  4. On first launch, DataLocker will:
     - Ask you to create a master password (minimum 10 characters,
       must include uppercase, lowercase, and numbers)
     - Generate a 24-character recovery key — SAVE THIS SOMEWHERE SAFE
     - Register the right-click context menu for "Lock with DataLocker"

  5. You can now right-click any file in Windows Explorer and select
     "Lock with DataLocker" to encrypt it, or "Unlock with DataLocker"
     to decrypt it.


  FILES INCLUDED
  --------------
  app.py                 Main application (GUI and entry point)
  crypto_service.py      Encryption engine (AES-128-CBC + HMAC-SHA256)
  vault_service.py       Password management, lockout, recovery
  register_extension.py  Windows right-click context menu registration
  icon_generator.py      Application icon creation
  diagnose.py            Diagnostic tool for troubleshooting
  requirements.txt       Python package dependencies
  README.txt             This file


  IMPORTANT WARNINGS
  ------------------
  1. REMEMBER YOUR PASSWORD. If you forget your master password AND lose
     your recovery key, your encrypted files CANNOT be recovered. There is
     no backdoor, no cloud backup, and no way to reset your password without
     the recovery key. This is by design — your security depends on it.

  2. SAVE YOUR RECOVERY KEY. When you first set up DataLocker, a 24-character
     recovery key is generated. Write it down on paper and store it in a safe
     place. It is the ONLY way to regain access if you forget your password.

  3. BACK UP ORIGINAL FILES. Before encrypting important files for the first
     time, keep an unencrypted backup until you are confident the process
     works correctly on your system.

  4. DO NOT RENAME .locked FILES. Encrypted files have the .locked extension.
     Renaming them or changing the extension may prevent decryption.

  5. DO NOT MODIFY ENCRYPTED FILES. Opening a .locked file with a text editor
     or hex editor and saving changes will corrupt the file permanently.

  6. BRUTE-FORCE PROTECTION. After multiple failed password attempts,
     DataLocker locks out for escalating periods: 15 minutes after 2 failures,
     1 hour after 4, 24 hours after 6. This protects against unauthorized
     access but also means YOU will be locked out if you mistype repeatedly.


  CONFIGURATION
  -------------
  DataLocker stores its configuration in:
    %USERPROFILE%\.filelocker\

  This folder contains:
    config.json        Master password hash and settings
    registry.dat       Encrypted file registry
    recovery.dat       Encrypted recovery data
    recovery_key.dat   Recovery key backup (encrypted)

  To completely uninstall DataLocker:
    1. Decrypt all your .locked files first
    2. Delete the DataLocker program folder
    3. Delete %USERPROFILE%\.filelocker\
    4. The right-click menu entries will disappear automatically


  DISCLAIMER
  ----------
  THIS SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
  OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  FITNESS FOR A PARTICULAR PURPOSE, AND NONINFRINGEMENT. IN NO EVENT SHALL
  THE AUTHORS BE LIABLE FOR ANY CLAIM, DAMAGES, OR OTHER LIABILITY ARISING
  FROM THE USE OF THIS SOFTWARE.

  DataLocker uses industry-standard AES-128 encryption (FIPS 197). While
  AES-128 is approved by NIST for protecting classified information, no
  software can guarantee absolute security. The strength of your protection
  depends on your password strength and how you safeguard your recovery key.

  By using DataLocker, you acknowledge that:
  - You are solely responsible for remembering your password
  - You are solely responsible for safeguarding your recovery key
  - Lost passwords without recovery keys result in permanent data loss
  - The developers cannot recover encrypted files under any circumstances


  SUPPORT
  -------
  Email: support@datalocker.pro
  Web:   https://datalocker.pro


  LICENSE
  -------
  Copyright 2026 WP-Mason. All rights reserved.

================================================================================
