Free AES Text Encryption (AES-256-GCM)

Encrypt text with a password using AES-256-GCM · and decrypt it back. Keys are derived with PBKDF2 and everything stays in your browser.

Frequently asked

How is the key derived from my password?

PBKDF2 with SHA-256, a random salt, and a high iteration count stretches your password into a 256-bit AES key. The salt and IV are prepended to the output blob, so the password alone decrypts it later.

Why GCM instead of CBC?

GCM is authenticated encryption: it detects any tampering with the ciphertext before decrypting. CBC without a separate MAC is malleable and enabled a generation of padding-oracle attacks · modern designs default to GCM.

Related tools

  • .gitignore Generator · Pick your stack and get a ready .gitignore · with the .env and secret-file rules that keep credentials out of your repository.
  • Data URI Generator · Convert a file or image into a Base64 data URI · ready to inline into HTML, CSS, or JSON. The file is read locally and never uploaded.
  • Password Generator · Generate strong, cryptographically random passwords · choose the length and character sets, then copy with one click.

Run a full security scan →