AES-256 Text Encryption — AES-GCM With PBKDF2 Password

How to use

1. Pick Encrypt, type your message and choose a strong password.
2. Press Encrypt → base64 and copy the blob wherever you need it.
3. To decode, switch to Decrypt, paste the blob and enter the same password.
4. Wrong password or altered blob? The tool says so instead of returning garbage.

About this tool

Real AES-256 encryption, running where nobody can intercept it: your browser's native WebCrypto engine. Choose a password and the tool derives a 256-bit AES-GCM key with PBKDF2-SHA256 at 150,000 iterations over a random 16-byte salt; your message is sealed with a fresh 12-byte IV and packed into a single base64 blob you can paste into an email, chat or note. Decrypting is the mirror operation — paste the blob, enter the same password, and authenticated decryption either returns your exact text or refuses with a clear error when the password is wrong or the data was altered. Your file never leaves this page — processing runs entirely in your browser; nothing is uploaded and the data is dropped from memory when you close the tab. One warning is printed on the page because it matters: if you lose the password, the data is mathematically unrecoverable — there is no reset and no backdoor.

FAQ

Rate this tool

Your rating stays in this browser (local storage) — nothing is sent to any server.