AES Encrypt / Decrypt Text
Type a message and a password to get an encrypted Base64 string you can share. Paste it back with the same password to decrypt.
AES-256-GCM with a key derived by PBKDF2-SHA256 (310,000 rounds). The output is salt + IV + ciphertext in Base64. Everything runs in your browser.
About this tool
AES-GCM is the authenticated encryption mode used by TLS, and it is what the browser's Web Crypto API offers natively. The password is stretched into a 256-bit key with PBKDF2-SHA256 and 310,000 iterations, a fresh random salt and a fresh 96-bit nonce are generated for every message, and the output packs salt, nonce and ciphertext into one Base64 string. Tampering with the ciphertext makes decryption fail instead of returning garbage.
Use it to send a secret through a channel you do not fully trust, store a note encrypted at rest, or learn how authenticated encryption behaves. The strength depends on the password: prefer a long passphrase. The output format is specific to this tool; interoperating with other software requires matching the same layout.
Frequently asked questions
- I lost the password. Can the text be recovered?
- No. There is no server and no key escrow; without the password the data is unrecoverable by design.
- Why is the output different every time?
- A random salt and nonce are used for each encryption. Both decrypt to the same text with the same password.
- Is this secure enough for sensitive data?
- The primitives are the standard ones. The weak point is always the password and the device you type it on.