Text Encryption / Decryption Tool

AES-256-GCM (Advanced Encryption Standard, 256-bit key, Galois/Counter Mode). AES-256 is the industry standard used by governments and financial institutions worldwide. GCM mode provides both confidentiality (nobody can read the data) and authenticity (tamper detection). The key is derived from your password using PBKDF2 with 100,000 iterations and SHA-256.

No. All encryption and decryption happens entirely in your browser using the Web Crypto API, which is built into all modern browsers. Your text and password never leave your device. This tool works offline once the page is loaded.

Each encryption operation generates a random 16-byte salt and 12-byte IV (Initialization Vector). These are included in the encrypted token. This randomness means encrypting the same plaintext with the same password will produce a different token each time — which is a security feature that prevents pattern analysis attacks.

AES-256-GCM with PBKDF2 key derivation (100k iterations) is considered very strong. Breaking it by brute force is computationally infeasible. However, the security ultimately depends on password strength — a weak or reused password significantly reduces security. Use a long, random passphrase for maximum protection.

The encryption is one-way: if you lose the password, the data cannot be recovered. There is no backdoor, recovery key, or master password. This is by design — if recovery were possible, so would unauthorized decryption. Always store your password securely (a password manager is recommended).

Encrypting short pieces of sensitive text before sharing them over insecure channels (email, chat, GitHub issues). Examples: API keys, passwords, configuration values, personal notes. For large file encryption, database encryption, or enterprise use cases, use purpose-built tools like GPG, 1Password, or your cloud provider's KMS.