Text Encrypt & Decrypt
Encrypt and decrypt text using AES-256-GCM directly in your browser. Passphrase-protected, private, and free.
How to Use
- 1. Select the Encrypt or Decrypt tab.
- 2. Enter your plain text (to encrypt) or paste the encrypted base64 string (to decrypt).
- 3. Enter a passphrase — use the same passphrase to encrypt and decrypt.
- 4. Click Encrypt Text or Decrypt Text.
- 5. Click Copy to copy the output.
About This Tool
This tool provides AES-256-GCM encryption — Advanced Encryption Standard with a 256-bit key in Galois/Counter Mode. AES-GCM is an authenticated encryption algorithm, meaning it provides both confidentiality (encryption) and integrity (tamper detection) in a single operation.
Your passphrase is never used directly as an encryption key. Instead, it goes through PBKDF2 (Password-Based Key Derivation Function 2) with 100,000 iterations of SHA-256 and a random 16-byte salt. This makes brute-force attacks computationally expensive even if the encrypted output is obtained.
The encrypted output is a single base64 string that contains the salt, the IV (initialization vector), and the ciphertext — everything needed to decrypt. Share this string with anyone who knows the passphrase, and they can decrypt it using this tool on any device.
All cryptographic operations use the browser's native Web Crypto API (crypto.subtle) — the same engine your browser uses for HTTPS. No external libraries are used. No data ever leaves your browser. This ensures your sensitive text stays private.
Use cases include: encrypting sensitive notes before storing them in cloud services, sharing confidential information with a known passphrase, securing personal data, and learning how AES-GCM encryption works in practice.
You may also find our Hash Generator, HMAC Generator, and Password Generator helpful.
Frequently Asked Questions
What encryption algorithm does this tool use?
This tool uses AES-256-GCM — Advanced Encryption Standard with 256-bit keys in Galois/Counter Mode. AES-GCM is authenticated encryption, meaning it also verifies data integrity, preventing tampering.
How is the passphrase turned into an encryption key?
The passphrase is converted to a key using PBKDF2 (Password-Based Key Derivation Function 2) with 100,000 iterations of SHA-256, applied to a random 16-byte salt. This makes brute-force attacks computationally expensive.
Is my text safe when using this tool?
Yes. All encryption and decryption happens entirely in your browser using the Web Crypto API. Nothing is ever sent to any server. Close the tab and all data is gone.
What is the output format?
The encrypted output is a base64-encoded string containing the salt, IV (initialization vector), and ciphertext — everything needed to decrypt it later. To decrypt, you need the same passphrase.
Can I decrypt on a different device?
Yes. As long as you have the encrypted base64 output and the original passphrase, you can decrypt the text using this tool on any device with a modern browser.
Was this tool helpful?
More Tools
Related Security
QR Code Generator
Password Generator
Hash Generator
JWT Decoder
You Might Also Like