How is the encryption key derived?

Your passphrase is stretched into a 256-bit AES key using PBKDF2 with SHA-256 and 150,000 iterations, plus a random salt.

What if I forget the passphrase?

There is no way to recover encrypted data without the exact passphrase — nothing is stored anywhere.

Is this safe for real secrets?

It uses standard, audited Web Crypto primitives, but always use a strong, unique passphrase and keep the ciphertext output safe.

AES Encrypt/Decrypt

Encrypt or decrypt text with AES-GCM and a passphrase.

Works Offline

Privacy First

No Login

No API

Passphrase

Plaintext

Result

Uses AES-GCM with a PBKDF2-derived key (150,000 iterations, SHA-256), random salt and IV. Output packs salt + IV + ciphertext as base64.

About the AES Encrypt/Decrypt

Encrypt text with AES-GCM using a key derived from your passphrase via PBKDF2, with a random salt and IV generated for every encryption. Decrypt by pasting back the Base64 output and the same passphrase.

Examples

Encrypt a message

Secret message + passphrase

Output

Base64-encoded salt+iv+ciphertext

Related tools

Base32 Encoder

Encoders & Crypto

Encode or decode text using RFC 4648 Base32.

Base64 Encoder

Encoders & Crypto

Encode or decode text to/from Base64, UTF-8 safe.

Checksum Comparator

Encoders & Crypto

Hash text or a file and compare against an expected checksum.

File Hash Calculator

Encoders & Crypto

Compute SHA-1/256/384/512 digests of a local file.

Hash Generator

Encoders & Crypto

Generate SHA-1/256/384/512 hashes of text.

HMAC Generator

Encoders & Crypto

Sign a message with HMAC using a secret key.

Frequently asked questions

Version 1.0.0 · Updated 2026-08-06 · Runs entirely in your browser