🔐 AES Encrypt & Decrypt
Encrypt a text snippet with a passphrase using AES-256-GCM. A random salt and IV are generated per encryption and packaged with the ciphertext, so decrypting only needs the passphrase.
The key stays entirely in your browser — nothing is sent anywhere. This is for casual, personal use; for anything sensitive, use a dedicated encryption tool.
Encrypt
Decrypt
How this works
Your passphrase is stretched into a 256-bit AES key with PBKDF2 (SHA-256, 150,000 iterations) using a
random 16-byte salt. A random 12-byte IV is generated for every encryption. The output blob is simply
salt (16 bytes) + IV (12 bytes) + ciphertext, base64-encoded, so it's a single string you
can copy anywhere. AES-GCM includes a built-in authentication tag — decrypting with the wrong
passphrase fails outright rather than silently returning garbage.