AES Encryption / Decryption
Encrypt and decrypt text with AES-256 using a password. What you enter stays in your browser.
Enter text and a password to encrypt
Your password and data stay in your browser: this tool doesn't send them to our servers.
AES Encryption FAQ
What is AES-256 encryption?
AES-256 is a symmetric encryption standard using a 256-bit key. It is approved by NIST, used by the U.S. government, and considered virtually unbreakable with current technology. AES-256 is the gold standard for data encryption.
What is the difference between GCM and CBC?
GCM (Galois/Counter Mode) provides both encryption and authentication — it detects if the ciphertext was tampered with. CBC (Cipher Block Chaining) only encrypts and requires a separate MAC for integrity checking. GCM is recommended for most use cases.
How is my password used?
Your password stays in your browser. It is used to derive an AES-256 key using PBKDF2 with 100,000 iterations and SHA-256. A random salt is generated for each encryption, ensuring the same password produces different ciphertexts.
Is the output format portable?
Yes. The Base64 output contains the salt, IV, and ciphertext concatenated together. Anyone with your password can decrypt it using this tool or any compatible AES implementation. The format is: salt (16 bytes) + IV (12/16 bytes) + ciphertext.
Need to share encrypted data securely?
Don't paste credentials into chat or email. Use CredenShare to deliver them with AES-256 encryption and automatic expiration.