Encrypt text in your browser with AES-GCM — nothing is uploaded, and only your password can unlock it again.
Client-side only: AES-256-GCM with a PBKDF2 key (100,000 iterations). If you lose the password, the text cannot be recovered — there is no reset. Never paste secrets you cannot afford to lose.
result
How to use this tool
Encrypt turns readable text into a locked package; decrypt unlocks a package made by this tool.
The password is the only key. Use a long passphrase you will remember.
Send the encrypted package by one channel and the password by another.
There is no reset and no back door — a lost password means the text is gone for good.
Formula & worked example
Encrypting 'Hello, this is a secret message.' with a passphrase gives a JSON package that only the same passphrase can decrypt back to the original text.
Limitations — read this before you rely on it
Client-side only: it protects text in transit/storage, but it cannot protect you if your device is compromised, the password is weak, or the password is shared insecurely. It is not a substitute for end-to-end messaging apps for high-risk secrets.
Frequently asked questions
No. Encryption and decryption run entirely in your browser with WebCrypto.
No. The password never leaves your device and is never stored, so a lost password cannot be reset.
Decryption fails cleanly — AES-GCM authentication detects the wrong key and returns an error, not garbled text.
Only if it uses the same AES-GCM + PBKDF2 package format. Other tools' formats will be rejected.
Yes — AES-256-GCM is a modern authenticated encryption standard, provided the password is strong.