Encrypt or decrypt text locally with AES-GCM and a passphrase-derived key.
Plain Text
Paste the text to encrypt into a portable AES-GCM JSON payload.
Passphrase
The same passphrase must be used for both encryption and decryption.
Passphrase strength: strong enough
28 charsMeets the minimum strength rule for this tool.
Encrypted Output
This JSON package contains the salt, IV, iterations, and ciphertext.
Mode
PBKDF2 Iterations
250,000
Validation
How To Use
This tool uses AES-GCM with a key derived from your passphrase using PBKDF2-SHA-256.
Encrypt mode outputs a self-contained JSON package with the salt, IV, iteration count, and ciphertext. Decrypt mode expects that same JSON structure.
Everything runs locally in the browser. The passphrase and plaintext are never uploaded.
Explore adjacent workflows and keep users moving between relevant tools.
RSA Encrypt / Decrypt
Encrypt short text with a public RSA key or decrypt Base64 ciphertext with the matching private key
HMAC Generator
Generate keyed HMAC signatures locally with common digest algorithms and export the result instantly
HMAC Verify
Verify an expected HMAC signature against local input, secret, algorithm, and output format
Hash Generator
Hash input text instantly with browser-native algorithms and export the digest in hex or Base64