lock Text Encrypt / Decrypt

Encrypt and decrypt text securely using AES-256-GCM with a password. All processing happens in your browser.

arrow_forward
shield AES-256-GCM · PBKDF2 · 100,000 iterations · SHA-256
Plaintext
Password
Encrypted Output (Base64)
info How It Works
key
PBKDF2 Key Derivation
Your password is stretched with 100,000 iterations and a random salt to produce the encryption key.
lock
AES-256-GCM Encryption
Industry-standard authenticated encryption - provides both confidentiality and integrity.
devices
Client-Side Only
All cryptographic operations run in your browser. Nothing is sent to any server.
storage
Self-Contained Output
The Base64 output includes salt + IV + ciphertext - everything needed to decrypt later.
warning If you lose your password, the encrypted text cannot be recovered. There is no backdoor.

This tool encrypts text using AES-256 with a password you choose, producing scrambled ciphertext that can only be decrypted back to the original with the same password - useful for protecting sensitive notes, sharing a secret securely, or encrypting text before storing it somewhere less trusted.

Frequently asked questions

AES-256 is a widely-trusted, industry-standard encryption algorithm used to protect everything from government data to banking systems - it's considered extremely secure when used correctly with a strong password.

The password is not stored anywhere by this tool - if you forget it, there is no way to recover the original text from the encrypted output. Keep the password somewhere safe.

Encryption/decryption runs entirely in your browser - neither your text nor your password is transmitted anywhere.

The encryption algorithm is only as strong as the password protecting it - use a long, random, unique password rather than something easily guessable, since a weak password undermines even strong encryption.