Text Encrypt & Decrypt
Encrypt and decrypt text using AES-GCM encryption with PBKDF2 key derivation. Your data never leaves your browser — all cryptographic operations run locally using the Web Crypto API.
About Text Encrypt & Decrypt
This tool provides strong, browser-based text encryption using the AES-GCM (Advanced Encryption Standard - Galois/Counter Mode) algorithm, one of the most trusted symmetric encryption standards used worldwide. Whether you need to share sensitive information securely, protect private notes, or simply learn how modern encryption works, this tool gives you military-grade encryption without installing any software or trusting a third-party server with your data.
The encryption process uses PBKDF2 (Password-Based Key Derivation Function 2) to convert your password into a 256-bit cryptographic key. PBKDF2 applies 100,000 iterations of the SHA-256 hashing algorithm along with a random 16-byte salt, making brute-force attacks against your password computationally expensive. Each encryption operation generates a unique random 12-byte initialization vector (IV), which means encrypting the same text with the same password will produce different ciphertext every time. This prevents pattern analysis attacks.
AES-GCM is an authenticated encryption mode, which means it not only encrypts your data but also verifies its integrity. If anyone modifies even a single bit of the encrypted text, decryption will fail and the tool will alert you. This protects against tampering and ensures you can trust the decrypted output. The encrypted output is formatted as a Base64 string that combines the salt, IV, and ciphertext, making it easy to copy and share through any text-based channel such as email, messaging apps, or documents.
All cryptographic operations are performed entirely in your browser using the Web Crypto API, which is a native browser feature designed specifically for secure cryptographic operations. Your plaintext, password, and encryption keys never leave your device. You can verify this by using the tool with your internet connection disabled — it works exactly the same way. No data is logged, stored, or transmitted to any server.
FAQ
Q: How secure is this encryption?
This tool uses AES-256-GCM, which is the same encryption standard used by governments and financial institutions worldwide. With a strong password, the encryption is considered computationally unbreakable with current technology. The security of your encrypted text depends primarily on the strength of your password — use a long, unique password with a mix of letters, numbers, and symbols for best protection.
Q: Can I decrypt text that was encrypted with this tool on a different computer?
Yes. As long as you have the exact encrypted text (Base64 string) and the correct password, you can decrypt it on any device using this tool. The encrypted output contains all the information needed for decryption (salt and IV) alongside the ciphertext.
Q: What happens if I forget the password?
There is no way to recover encrypted text without the correct password. This is by design — it is what makes the encryption secure. There are no backdoors, password hints, or recovery mechanisms. Always store your passwords in a reliable password manager.
Q: Why does encrypting the same text with the same password produce different results?
Each encryption uses a randomly generated salt and initialization vector (IV). This is a critical security feature called semantic security. It prevents attackers from determining whether two encrypted messages contain the same content, even if the same password was used. Despite the different encrypted outputs, all of them will decrypt to the same original text with the correct password.
Q: Is my data sent to any server?
No. All encryption and decryption happens locally in your browser using the Web Crypto API. Your text, password, and keys never leave your device. You can disconnect from the internet and the tool will work identically.