AES Encryption
Encrypts and decrypts text with AES — the symmetric cipher that secures TLS, disk encryption and password managers. Choose AES-GCM (authenticated) or AES-CBC, a 128/192/256-bit key, and derive the key from a passphrase with PBKDF2 or supply a raw key. A random IV and salt are generated for you and packed into the output.
Runs 100% in your browser — keys and data never leave your device.
Read the full guide to this tool
Notes
- AES-GCM is authenticated: decryption fails loudly if the ciphertext or the associated data was tampered with. Prefer it unless you must interoperate with CBC.
- Never reuse an IV/nonce with the same key in GCM — it catastrophically breaks confidentiality. This tool generates a fresh random one every time.
- A passphrase is stretched into a key with PBKDF2-SHA256; the salt and iteration count are stored alongside the ciphertext so decryption can reproduce the key.
- Runs 100% in your browser — keys and data never leave your device.