AES-GCM Encrypt
Encrypt with a raw AES key and IV — for developers testing interoperability.
Leave empty to generate a random one when encrypting.
● 🔒 Your data is processed locally in your browser with the Web Crypto API and is never uploaded to our servers.
How it works
AES-GCM is authenticated encryption: it encrypts and adds a 16-byte tag that detects any change to the ciphertext, the IV or the additional data. Web Crypto (like Java and Node's “aes-256-gcm” with the tag appended) outputs ciphertext followed by the tag. By default the 12-byte IV is placed in front of the result, a common convention — untick the option to handle it separately.
Never reuse an IV with the same key: doing so breaks GCM's security. To encrypt with a password instead of a raw key, use AES Encrypt.