AES Encrypt / Decrypt
Password-based AES-256-GCM encryption, fully local.
v1.salt.iv.ciphertext (Base64) โ decryptable only with the same password. Everything happens in your browser.About the AES Encrypt / Decrypt
Encrypt and decrypt text with AES-256-GCM using a password, entirely in your browser. Keys are derived with PBKDF2 at 150,000 iterations and a random salt, each message gets a fresh 12-byte IV, and the payload is a self-describing v1.salt.iv.ciphertext string in Base64 that only the same password can open.
How to use the AES Encrypt / Decrypt
- Stay on the Encrypt tab, enter a strong password, and type the secret text.
- Press Encrypt and copy the v1.salt.iv.ciphertext payload.
- To decrypt, switch to the Decrypt tab, paste the payload and enter the same password.
- Press Decrypt to recover the original text.
AES Encrypt / Decrypt FAQ
What is in the encrypted payload?
Four dot-separated Base64 parts: a version tag, a random 16-byte salt, a random 12-byte IV and the ciphertext itself โ everything a decryption needs except the password.
Why PBKDF2 with 150,000 iterations?
Key derivation stretches the password so brute-forcing each attempt costs real time; 150,000 SHA-256 rounds is a widely used OWASP-aligned cost for password-based encryption.
What does a decryption failure mean?
Either the password is wrong or the payload was corrupted โ GCM authentication detects both and the tool reports failure rather than returning garbage.