Text Encrypt & Decrypt (AES)
Encrypt or decrypt text with a password using AES-256-GCM and PBKDF2 key derivation — everything runs on your device, so the plaintext stays private.
Advanced: raw key / IV
Supply your own key and IV to encrypt or decrypt AES-GCM / AES-CBC data made by another tool. The Web Crypto API provides only these two algorithms — there is no DES, 3DES, RC4, Blowfish or ChaCha. AES-GCM needs a 12-byte IV; AES-CBC needs a 16-byte IV. Key and IV use the encoding chosen below; the ciphertext is base64.
Hex uses only 0–9 and a–f, e.g. 2b7e151628aed2a6abf7158809cf4f3c (32 characters = 16 bytes). Base64 mixes letters, digits, + and / and may end in =, e.g. K34VFiiu0qar9xWICc9PPA== (24 characters = the same 16 bytes). Pick the encoding your key looks like; if it is refused, try the other.
🔒 AES-256-GCM with PBKDF2 (600,000 iterations), entirely in your browser. There is no password recovery — if you lose the password, the text cannot be decrypted.
Encrypt text with a password
Type or paste text, choose a password, and get an AES-256-GCM encrypted string you can safely share or store. To read it back, paste the encrypted text with the same password. The key is derived from your password with PBKDF2 (600,000 iterations), and everything runs in your browser — the text and password never leave your device.
How it works
Each encryption uses a fresh random salt and IV, so encrypting the same text twice produces different output. The result packs the salt, IV and ciphertext together as Base64. Decryption fails cleanly if the password is wrong or the text was altered. To check that a fresh result opens, press "Decrypt this result": the ciphertext moves into the decrypt box with the password still in place.
Raw key and IV
Under "Advanced: raw key / IV", tick "Use a raw key + IV instead of a password" to encrypt or decrypt AES-GCM or AES-CBC data made by another tool, with an AES-128 or AES-256 key and an IV typed in hex or base64. AES-GCM checks an authentication tag, so a wrong key or altered ciphertext is refused. AES-CBC has no such check: a wrong key is usually caught by the padding, but now and then it slips through and you are shown garbage instead of an error.
Frequently asked questions
Can I recover the text if I forget the password?
No. There is no backdoor or recovery — the password is the only key. If you lose it, the text cannot be decrypted.
Is this secure?
It uses AES-256-GCM with PBKDF2 key derivation via the browser Web Crypto API. Strength depends on choosing a strong, unique password.