Security model
Payload includes random salt and IV; key is derived from passphrase using PBKDF2 before AES-GCM operations.
AES text encrypt/decrypt
Security toolsEncrypt and decrypt text locally with AES-256-GCM and passphrase-derived keys.
Updated
Encrypt
Cipher payload
Quick start
How to encrypt text with AES
Encrypt/decrypt text locally with passphrase-derived AES key.
- Step 1Enter plaintext
Type message and passphrase.
- Step 2Encrypt
Generate JSON payload containing salt, IV and ciphertext.
- Step 3Decrypt
Use same passphrase to restore plaintext.
In-depth guide
AES encrypt / decrypt
Encrypt and decrypt text with AES-256-GCM in-browser using WebCrypto and password-based key derivation.
Operational caution
Use strong passphrases and secure local handling if encrypting sensitive production data.
When to use it vs alternatives
Use this tool for quick browser-based work when you need an answer or output immediately. Use a dedicated application or automated workflow when you need bulk processing, approvals, or repeatable production rules.
Step-by-step usage
- Enter plaintext — Type message and passphrase.
- Encrypt — Generate JSON payload containing salt, IV and ciphertext.
- Decrypt — Use same passphrase to restore plaintext.
Common pitfalls
- Check the result before replacing the original input.
- Watch for unit, format, encoding, and browser memory limits on large inputs.
- Keep a copy of important source material until the output is verified.
Frequently asked questions
Which algorithm is used?
AES-256-GCM with PBKDF2-SHA256 key derivation and random salt/IV.
Is encryption local?
Yes. WebCrypto runs in your browser with no server round-trip.
Can I decrypt later?
Yes, if you keep the JSON payload and exact passphrase.
Keep exploring
More tools you'll like
Hand-picked utilities that pair well with the one you're on — all free, client-side, and zero-signup.
More security tools
See all →- JWT generator (HS256) Popular New
Generate signed HS256 JWTs from custom header and payload JSON locally.
- TOTP tool New
Generate 6-digit rolling TOTP codes and otpauth URIs from Base32 secrets.
- Pwned password check Popular New
Check password breach exposure using Have I Been Pwned k-anonymity range API.
Popular across EpitomeTool
Browse all →- PDF toolsPDF compressor Popular
Shrink PDF file size without uploading to a server.
Open tool - Fitness & healthBMI calculator Popular
Body Mass Index with metric / imperial inputs and WHO category bands.
Open tool - PDF toolsPDF merger Popular
Combine multiple PDFs into one in your browser.
Open tool - PDF toolsPDF splitter Popular
Split a PDF by pages or page ranges, download as zip.
Open tool