🔏

Text Encryptor

Encrypt and decrypt text with AES-256-GCM using your password. Nothing leaves your browser.

🔒 100% private. All encryption and decryption uses your browser's built-in SubtleCrypto (AES-256-GCM + PBKDF2). No data is ever sent to a server.

Use a strong, memorable password. Without it, the text cannot be recovered.

About this tool

Encrypt text with a password

This text encryptor turns a message into unreadable Base64 text that can only be turned back with the same password. It uses the Web Crypto API built into your browser — AES-256-GCM encryption with a key derived from your password by PBKDF2 (SHA-256, 200,000 iterations). The text and password are not sent to a server.

How to use it

  1. Choose Encrypt or Decrypt.
  2. Type or paste your text (or the encrypted Base64 string when decrypting).
  3. Enter the password. Use Show to check what you typed.
  4. Click the button, then Copy the result. Swap moves the output into the input and switches mode, which is handy for a quick test.

How it works

  1. A random 16-byte salt and a random 12-byte IV (nonce) are generated.
  2. PBKDF2 turns your password and the salt into a 256-bit key.
  3. AES-GCM encrypts the text and adds a 16-byte authentication tag that detects any changes.
  4. Salt + IV + ciphertext are joined and encoded as Base64.

Example: encrypting the 5-character word "hello" gives 16 + 12 + 5 + 16 = 49 bytes, which is a 68-character Base64 string. Because the salt and IV are random, encrypting the same text twice gives different output each time.

Know the limits

  • The protection is only as strong as your password. A short or common password can be guessed by someone with the encrypted text.
  • There is no password recovery. If you forget it, the text cannot be decrypted.
  • Send the encrypted text and the password through different channels.
  • This is a simple utility, not a full secure-messaging system: it does not verify who sent a message or protect a device that is already compromised.

Frequently asked questions

Why does decryption fail?

Either the password is wrong (it is case-sensitive) or the encrypted text was changed or cut short when copied. AES-GCM rejects any altered data instead of returning garbage.

Can other tools decrypt it?

Only tools that use the same format: Base64 of a 16-byte salt, 12-byte IV and AES-GCM ciphertext, with PBKDF2-SHA-256 at 200,000 iterations.

More to explore

Related Text Tools

Browse all tools from the same category.

Showing 1-2 of 27