All tools
Security
Encrypt / Decrypt
Encrypt text with a password (AES-256-GCM), or use raw AES-GCM / CBC / CTR keys and IVs.
Password
AES-256-GCM with a key derived by PBKDF2-SHA256 (600,000 iterations) and a random salt. Output is Base64 of salt | iv | ciphertext | tag. There is no way to recover data if the password is lost.
Plain text
Encrypted text
Runs locally with the Web Crypto API.
Which mode should I use?
- Password — share a secret with someone who knows the password. Each encryption uses a new random salt and IV, so the same text encrypts differently every time.
- Raw AES key — reproduce or debug what your application does with an explicit key and IV. Output matches OpenSSL / Node.js
aes-256-gcm(tag appended),aes-256-cbcandaes-256-ctr. - Encryption happens in this tab only — keys, passwords and data are never sent anywhere.