AES-256 Encryption
Encrypt a message using the AES-256 standard in GCM mode, protected by a password. The key is derived with PBKDF2 (200,000 iterations, SHA-256). Everything runs on your device: nothing leaves your browser.
Symmetric encryption
Encrypted result
AES-256-GCM encryption with PBKDF2 key derivation (200,000 iterations, SHA-256). A random salt is used for each encryption. Without the password it's impossible to recover the text.
How to use: AES encryption
- 1Type the text you want to encrypt.
- 2Enter a strong password.
- 3Hit encrypt and share the result; decrypt it with the same password.
What is it for?
- Send notes or sensitive data over channels you don't fully trust.
- Keep encrypted secrets in shared documents.
- Test the AES-GCM encryption in your own apps.
AES encryption in the browser
What AES is
AES is a standard symmetric cipher: the same key encrypts and decrypts. With 128- to 256-bit keys it is considered secure for practical use.
Key from a password
A password is not a key by itself: it is derived with an algorithm such as PBKDF2 and a random salt, which is stored with the ciphertext. Weak passwords remain vulnerable to brute force.
GCM mode
AES-GCM encrypts and authenticates: if the ciphertext is altered, decryption fails instead of returning corrupt data. Never reuse the same initialization vector (IV) with the same key.
Related tools
Frequently asked questions
What does PBKDF2 do?+
It turns your password into a 256-bit cryptographic key by applying 200,000 iterations of SHA-256 hashing, which slows down brute-force attacks.