AES Encrypt and Decrypt
AES-256-GCM with a key from PBKDF2-SHA256 (600,000 rounds). Output: Base64 of a 16-byte salt, 12-byte IV, then the ciphertext and tag.
Protect a note, a recovery code or a config value with a password before you store or send it. The text is encrypted with AES-256-GCM in your browser and only the same password can open it.
- Free
- Runs in your browser
- AES-256-GCM
- No sign-up
How It Works
Encrypt or decrypt in three steps.
Enter text and a password
Use a long password; it is the only way to decrypt.
Press Encrypt
You get one block of Base64 text that is safe to store or send.
Decrypt later
Paste the block, enter the same password and press Decrypt.
How the encryption works
Your password is turned into a 256-bit key with PBKDF2-HMAC-SHA256 and a random salt, using 600,000 rounds, the figure OWASP recommends, so each password guess is slow for an attacker. The text is then encrypted with AES-256 in GCM mode, which also adds an authentication tag: if anyone changes even one character of the encrypted text, decryption fails instead of returning garbage. A fresh random salt and IV are used every time, so encrypting the same text twice gives different results.
There is no password recovery. If the password is lost, the text cannot be decrypted by anyone, including us.
AES-256-GCM
Authenticated encryption from your browser's built-in Web Crypto API.
Slow to guess
600,000 PBKDF2 rounds make each password attempt take noticeable time.
Documented format
Base64 of salt (16 bytes) + IV (12 bytes) + ciphertext and tag, readable by any AES-GCM library.
Nothing leaves your device
Text and password stay in the browser tab.
Convert PDF Files and File Formats
Find the perfect online tool to combine PDF files, compress documents, and handle your daily workflow effortlessly.
PDF Tools
All your PDF needs in one place
- Merge PDF
- Organize PDF
- Split PDF
- Compress PDF
- Convert to Word
- Convert to Image
Image Tools
Edit and optimize your images
- Resize Image
- Compress Image
- Convert Format
- Crop Image
- Add Watermark
- Remove Background
Word Tools
Work with Word documents
- Convert to PDF
- Merge Documents
- Split Documents
- Compress File
- Edit Text
- Add Watermark
Excel Tools
Process Excel spreadsheets
- Convert to PDF
- Convert to CSV
- Merge Sheets
- Split Sheets
- Compress File
- Clean Data
Why Use This AES Tool
Strong encryption without installing anything.
Modern settings
AES-256-GCM and PBKDF2 with 600,000 rounds, not outdated defaults.
Tamper detection
Changed or truncated text fails to decrypt instead of giving wrong output.
Open format
Decrypt in Python, Node.js or any language with AES-GCM support.
Private
Encryption runs locally in your browser.
Frequently Asked Questions
Questions people ask about the AES Encrypt & Decrypt tool.
The encryption is only as strong as the password. Use at least 12 random characters or four or more random words. The Password Generator can make one.
Yes. Base64-decode the text, take the first 16 bytes as the PBKDF2 salt and the next 12 as the GCM IV, derive a 32-byte key with PBKDF2-HMAC-SHA256 at 600,000 rounds, and decrypt the rest, whose last 16 bytes are the tag. Python's cryptography package and Node's crypto module both support this.
A new random salt and IV are used each time. That stops anyone from telling whether two encrypted texts contain the same message.
It is designed for text such as notes, keys and short messages. For files and folders, use tools built for that, such as 7-Zip with AES-256 or your operating system's encrypted disk images.
Related Text & Developer Tools
More small utilities that run in your browser.
HMAC Generator
Sign a message with HMAC-SHA256 or SHA-512 and a secret key.
SHA-256 Hash Generator
Get the SHA-256 hash of text or a file and verify a download.
Password Generator
Create strong random passwords in your browser.
Random String Generator
Make random strings from the characters you choose.
Base64 Encode & Decode
Encode text to Base64 or decode it back.