AES Encrypt / Decrypt

Encrypt or decrypt text with AES-256-GCM using a passphrase — all in your browser.

Private by design. Every tool runs 100% in your browser — your code, text, and tokens never leave your device. Nothing is uploaded or stored.

AES-256-GCM with a PBKDF2-derived key (100k iterations). Output bundles salt + IV + ciphertext as Base64.

Output

Result appears here.

Frequently Asked Questions

Is AES-256-GCM safe to use?

Yes — GCM is an authenticated cipher that detects tampering. The encryption runs entirely in your browser from a passphrase; no data is uploaded.

Why must I keep the passphrase?

There is no recovery. AES is symmetric, so the exact passphrase is the only way to decrypt. Losing it means the data is unrecoverable by design.

Should I use the same passphrase for everything?

No. Reusing a passphrase across sensitive items means one leak exposes all. Generate a unique passphrase per secret.