Text Encryption (AES)
Encrypt a note with a passphrase, in your browser.
Text Encryption encrypts text with AES-256-GCM using a key derived from your passphrase with PBKDF2 at a high iteration count, and produces a Base64 blob you can paste anywhere. Decryption needs the same passphrase. Keys are derived and used only in your browser through the Web Crypto API.
Loading Text Encryption (AES)…
Runs entirely on your device. No file or text you enter here is uploaded. How to verify it.
How to use Text Encryption (AES)
- Paste your text and choose a strong passphrase.
- Encrypt, and copy the Base64 result.
- To read it back, paste it with the same passphrase and decrypt.
Questions about Text Encryption (AES)
Which algorithm and parameters?
AES-256 in GCM mode, which authenticates as well as encrypts, so tampering is detected rather than silently decrypting to garbage. The key is derived with PBKDF2-SHA-256 at 600,000 iterations over a random 16-byte salt, and each message gets a fresh random 12-byte nonce.
How strong does the passphrase need to be?
It is the whole of your security — AES-256 does not help if the passphrase is guessable. Use a long random passphrase from Password Generator, and note that a slow key derivation only buys time against brute force, it does not make a weak passphrase safe.
Is this a substitute for a proper encrypted messenger?
No. It has no forward secrecy, no identity verification and no safe way to share the passphrase — and you must send that separately, over a different channel. It is useful for encrypting a note to yourself or a value at rest, not for a threat model with a determined adversary.
Can the person I send it to decrypt it here?
Yes, if they open the same tool and have the passphrase. The output is a self-contained Base64 blob carrying the salt and nonce, so nothing else has to be shared — but send the passphrase through a different channel from the message itself.
What happens if I forget the passphrase?
The text is gone. There is no recovery, no reset and no copy held anywhere, because the key is derived on your device and never stored. That is the design, and it is also the risk you are taking on.
Is Text Encryption (AES) really free, with no limits?
Yes. There is no account, no daily cap, no file-size tier and no watermark, because there is no server cost to recover. The site is funded by clearly disclosed partner recommendations on the Partners page, never by metering the tools.
Are my files or text uploaded when I use Text Encryption (AES)?
No. Everything is processed by JavaScript running in your browser, on your device. You can verify it: open your browser's developer tools, switch to the Network tab, and use the tool. You will see no request carrying your data — because there is nowhere for it to go.