AES Encrypt
Encrypt text securely in your browser with AES-GCM.
No password recovery. If you forget the password, the text cannot be decrypted by anyone, including us. Use a long, unique password.
🔒 Your data is processed locally in your browser and is never uploaded to our servers.
How it works
Your password is stretched into an encryption key with PBKDF2 (HMAC-SHA-256, 600,000 iterations) and a random 16-byte salt. The text is then encrypted with AES-GCM using a fresh random 12-byte IV. GCM is authenticated encryption: any change to the encrypted data is detected when decrypting.
The result packs a small header, the salt, the IV and the ciphertext into one Base64 or hex string. Use AES Decrypt to read it back.
Security notes
The encryption is only as strong as your password. The length of your message is not hidden. Random values come from crypto.getRandomValues(), never Math.random(). Your text and password are never stored or sent anywhere.
FAQ
Can I decrypt this with another tool?
Only with a tool that uses the same layout (header, salt, IV, PBKDF2 settings). KadiTools AES Decrypt does; other software would need to be configured to match.
Why AES-GCM?
It is a modern, widely reviewed mode that provides both confidentiality and tamper detection, and it's built into every browser's Web Crypto API.
Is Base64 output "encryption"?
No. Base64 (or hex) is just a way to write the encrypted bytes as text. The protection comes from AES and your password.