Encrypt and decrypt text with a passphrase using AES-256-GCM, the same encryption standard used in banking and security software. Everything runs locally in your browser using the Web Crypto API — your text and passphrase are never sent to any server.
This tool encrypts and decrypts text using AES-256-GCM, an authenticated encryption algorithm that protects both the confidentiality and integrity of the message. The key is derived from your passphrase using PBKDF2 with SHA-256 and 150,000 iterations, with a fresh random salt and IV for each encryption. The encrypted output is self-contained base64 text that can be decrypted on any device using this tool. Everything runs locally in your browser via the Web Crypto API.
AES-256-GCM with a PBKDF2-derived key (SHA-256, 150,000 iterations, random salt). This is a well-established standard with no known practical attacks.
No. Everything runs in your browser using the Web Crypto API. Nothing is ever transmitted or stored.
Yes. Once the page has loaded, all encryption and decryption runs locally with no internet connection required.
AES-256-GCM is very strong. The security depends on your passphrase — a weak passphrase is the most common point of failure.
There is no recovery option. Keep the passphrase somewhere safe.
Yes. The encrypted output is self-contained base64 text. Decrypt it using this tool on any device with the correct passphrase.
Always through a different channel than the encrypted text — for example, send the encrypted text by email and the passphrase by phone.
Yes, completely free with no sign-up required and no usage limits.
Encryption happens entirely in your browser (AES-256-GCM) — neither the text nor the password is ever sent to a server. Share the passphrase through a different channel than the encrypted message.