AES Encrypt / Decrypt

Encrypt or decrypt text with AES-256-GCM and a password. All processing happens in your browser — no data is ever sent to a server.

🔒 Your data stays on your device. This tool uses the browser’s built-in SubtleCrypto API — nothing is transmitted.
Plaintext
Password

About AES Encrypt / Decrypt

This tool uses AES-256-GCM (Advanced Encryption Standard, 256-bit key, Galois/Counter Mode) via the browser’s built-in Web Cryptography API (SubtleCrypto). AES-GCM provides both encryption and authentication, detecting any tampering with the ciphertext.

Key derivation: PBKDF2-SHA256 with 310,000 iterations and a random 16-byte salt — a deliberately slow process that resists brute-force attacks on weak passwords. IV: 12 random bytes generated freshly for every encryption. The output is salt + IV + ciphertext encoded as Base64.

Important: AES encryption is only as strong as your password. Use a long, random password and share it through a secure, separate channel. The encrypted output is safe to share openly — without the password it is computationally infeasible to decrypt.