Text Encryptor
Encrypt or decrypt text with a passphrase using AES-GCM, entirely in your browser via the native Web Crypto API.
🔒 Processed locally in your browser
Loading…
How to use
- Choose Encrypt or Decrypt using the mode toggle at the top.
- To encrypt, paste your plaintext and choose a passphrase, then click Encrypt to get a single block of encrypted text.
- To decrypt, paste that same encrypted text and enter the exact same passphrase, then click Decrypt to recover the original text.
- Use the Copy button to copy the result, and remember your passphrase — it's the only way to decrypt your data later.
Features
- Strong AES-GCM 256-bit authenticated encryption, so tampering or a wrong passphrase is detected, not silently ignored
- Passphrase-based key derivation with PBKDF2 (SHA-256, 150,000 iterations) and a random salt for every encryption
- Uses only the browser's native Web Crypto API — zero external cryptography libraries
- 100% client-side — your plaintext and passphrase never leave your device
- A show/hide toggle for the passphrase field so you can double-check what you typed
Frequently asked questions
Does my text or passphrase leave my browser?
No. All encryption and decryption happens locally using the browser's built-in Web Crypto API. Nothing is ever uploaded or sent to a server.
What happens if I forget my passphrase?
Your data is permanently unrecoverable. There is no backdoor, master key, or password reset — the passphrase is the only thing that can decrypt your data, so store it somewhere safe.
What encryption algorithm does this use?
AES-GCM with a 256-bit key derived from your passphrase via PBKDF2 (SHA-256, 150,000 iterations) and a random salt. A random IV is generated for every encryption, so encrypting the same text twice produces different output.
Why does decrypting sometimes show an error instead of garbled text?
AES-GCM includes a built-in authentication tag. If the passphrase is wrong or the encrypted text was altered or truncated, decryption fails outright with a clear error instead of silently producing corrupted output.
Can I share the encrypted text safely, for example over email or chat?
The encrypted output is safe to send over any channel, since it's meaningless without the passphrase. For real security, share the passphrase itself through a separate, trusted channel — never alongside the encrypted text.