🔐

Text Encryptor

Encrypt and decrypt text with a passphrase using AES-256-GCM. Everything runs in your browser — nothing is ever uploaded.

Encrypted output AES-256-GCM
Result will appear here…
All operations run in your browser via the Web Crypto API. No data is ever sent to a server. If you lose your passphrase, the text cannot be recovered.

How it works

1
Choose a mode

Select Encrypt to protect a message, or Decrypt to recover one from an encrypted block.

2
Enter your text and passphrase

Paste the text you want to encrypt (or the Base64 block you want to decrypt), then type a strong passphrase.

3
Click Encrypt / Decrypt

The browser derives a 256-bit key from your passphrase using PBKDF2 (100 000 iterations, SHA-256), then encrypts or decrypts using AES-256-GCM.

4
Copy or download the result

The encrypted output is a Base64 string containing a random salt, IV, and ciphertext — safe to copy, store, or share as text.

Frequently Asked Questions

Is my text sent to a server?

No. All encryption and decryption runs in your browser using the Web Crypto API (SubtleCrypto). Nothing leaves your device.

Which encryption algorithm is used?

AES-256-GCM with PBKDF2 key derivation (100 000 iterations, SHA-256, random 16-byte salt). This is a modern authenticated encryption scheme — it detects any tampering with the ciphertext.

What happens if I lose my passphrase?

There is no way to recover the encrypted text without the exact passphrase. This tool does not store or log passphrases anywhere.

What is the output format?

The output is a Base64-encoded string containing a random 16-byte salt, a 12-byte IV, and the AES-GCM ciphertext. Paste it back into the Decrypt tab with the same passphrase to recover the original text.