Nice util. Just a suggestion for the encryption: You should consider using a password-based key derivation function (PBKDF) rather than just hashing the key once with SHA256. This could help deter brute-force attacks particularly if the chosen hashing function is computationally intensive; e.g. scrypt