Encrypt any text with AES-256-GCM using a passphrase, and decrypt it back. Military-grade cryptography, 100% in your browser.
AES-256-GCM with PBKDF2 key derivation (100,000 iterations). The passphrase never leaves your device — if you lose it, the data is unrecoverable.
Type your text and a passphrase, then encrypt. The output is a compact Base64 payload (salt + IV + ciphertext). Paste it back with the same passphrase to decrypt — nowhere else can.
Three words people mix up constantly, each with a different job:
This tool applies real symmetric encryption in your browser: type a message, choose a passphrase, and the ciphertext can only be reversed with the same passphrase. Use cases that make sense: sharing a note with someone who will receive the key through another channel, keeping a diary entry scrambled from prying eyes, or adding a layer to a message that must cross insecure hands.
One honest rule: for serious confidentiality (legal, medical, corporate), use audited tools and key management — a browser cipher is excellent for everyday privacy, not for state secrets.
Everything runs entirely in your browser. Nothing you type is ever sent to any server or stored.
AES-256-GCM — the same authenticated encryption used in TLS, with PBKDF2 key derivation (100,000 iterations).
Yes — encryption happens locally with the Web Crypto API. Your text and passphrase never leave your device.
The data is mathematically unrecoverable. There is no backdoor — keep your passphrase safe.
No — without the passphrase, brute-forcing AES-256 would take longer than the age of the universe.
It stores the salt and IV needed to decrypt, plus the ciphertext and authentication tag.
Yes, completely free with no account.