AES Encryption illustration

AES Encryption

Encrypts and decrypts text with AES — the symmetric cipher that secures TLS, disk encryption and password managers. Choose AES-GCM (authenticated) or AES-CBC, a 128/192/256-bit key, and derive the key from a passphrase with PBKDF2 or supply a raw key. A random IV and salt are generated for you and packed into the output.

Runs 100% in your browser — keys and data never leave your device.

Notes

  • AES-GCM is authenticated: decryption fails loudly if the ciphertext or the associated data was tampered with. Prefer it unless you must interoperate with CBC.
  • Never reuse an IV/nonce with the same key in GCM — it catastrophically breaks confidentiality. This tool generates a fresh random one every time.
  • A passphrase is stretched into a key with PBKDF2-SHA256; the salt and iteration count are stored alongside the ciphertext so decryption can reproduce the key.
  • Runs 100% in your browser — keys and data never leave your device.

Explore the idea

This interactive demo needs JavaScript.