AES Encryption
Encrypt and decrypt text with a password using AES-256-GCM.
Uses AES-256-GCM with a key derived from your password (PBKDF2, 100,000 iterations). Everything runs in your browser and nothing is uploaded. Keep the password safe: without it the text cannot be recovered.
100% private - runs entirely in your browser.
Your input, keys and passwords are never uploaded. Want proof? Load this page, then turn off your internet - the tool still works. For an exact check, open your browser's DevTools Network tab and confirm no data is sent when you use it.
About the AES Encryption
Encrypt text with a password so only someone with the same password can read it, or decrypt text you received.
It uses AES-256-GCM with a key derived from your password using PBKDF2 (100,000 iterations), which are modern, trusted standards.
Everything runs in your browser using the Web Crypto API, so your text and password never leave your device.
Key features
- AES-256-GCM authenticated encryption
- Password-based key with PBKDF2
- Encrypt and decrypt in one tool
- Runs entirely in your browser
How to use
- 1Choose encrypt or decrypt.
- 2Enter your text and a password.
- 3Copy the encrypted or decrypted result.
Examples
secret message + passwordBase64 ciphertextThe same password is needed later to decrypt it back.
Base64 ciphertext + passwordsecret messageA wrong password fails safely rather than returning garbage.
Frequently asked questions
- What happens if I lose the password?
- The text cannot be recovered without the password. There is no backdoor, so store the password safely.
- What does the encrypted output contain?
- The Base64 output bundles the random salt, the initialization vector and the ciphertext, so you only need to keep the output and the password.
- Is my data uploaded?
- No. Encryption and decryption run entirely in your browser with the Web Crypto API.
Continue your workflow
Open a related tool to prepare your files or refine the finished result.