Category: Developer tools
AES Text Encryption
Encrypt or decrypt text locally with AES-GCM and a passphrase
Encrypt text with a passphrase using AES-GCM, or decrypt a ciphertext you already have, entirely in your browser with the Web Crypto API.
The result will appear here.
Encryption runs with the Web Crypto API's AES-GCM and PBKDF2 in your browser; the passphrase and text never leave this tab.
Everything on this page is processed in your browser. Nothing is uploaded.
What this tool does
Encryption uses AES-GCM with a 256-bit key derived from your passphrase through PBKDF2 (100,000 iterations, SHA-256), the same primitives most password managers use. Each encryption generates a fresh random salt and initialization vector, both stored alongside the ciphertext in the output, so encrypting the same text twice produces two different results and decrypting only ever needs the passphrase, not a separately noted salt or IV. Nothing here is sent anywhere; the passphrase and text stay in this browser tab.
How to use it
- Choose Encrypt or Decrypt.
- Enter a passphrase and the text or ciphertext.
- Copy the result; keep the passphrase somewhere safe, since it cannot be recovered.
Privacy
This tool runs entirely in your browser. Your input is never uploaded, stored or shared — closing the tab removes it.
Frequently asked questions
- What happens if I lose the passphrase?
- The ciphertext cannot be decrypted without it. There is no recovery option, by design: the passphrase is never stored anywhere.
- Is the passphrase or text sent to a server?
- No. Everything runs with the Web Crypto API in your browser tab; nothing is transmitted.
- Why does the same text encrypt differently each time?
- Every encryption uses a fresh random salt and initialization vector, which is standard practice for AES-GCM and keeps patterns from leaking across repeated encryptions of similar text.