AES Encrypt / Decrypt
Encrypt or decrypt text with AES-256-GCM using a passphrase — all in your browser.
Private by design. Every tool runs 100% in your browser — your code, text, and tokens never leave your device. Nothing is uploaded or stored.
AES-256-GCM with a PBKDF2-derived key (100k iterations). Output bundles salt + IV + ciphertext as Base64.
Output
Result appears here.
Frequently Asked Questions
Is AES-256-GCM safe to use?
Yes — GCM is an authenticated cipher that detects tampering. The encryption runs entirely in your browser from a passphrase; no data is uploaded.
Why must I keep the passphrase?
There is no recovery. AES is symmetric, so the exact passphrase is the only way to decrypt. Losing it means the data is unrecoverable by design.
Should I use the same passphrase for everything?
No. Reusing a passphrase across sensitive items means one leak exposes all. Generate a unique passphrase per secret.