Text Encrypt / Decrypt
Encrypt and decrypt text with a password using AES-256-GCM in your browser. Share the encrypted string safely; only the right password can read it. Nothing is uploaded.
AES-256-GCM · PBKDF2-SHA256 · 600k iterations · MTE2 v2 envelope · legacy v1 decryption supported
| Algorithm | Key | KDF | Used here | Notes |
|---|---|---|---|---|
| AES-256-GCM | 256-bit | PBKDF2-SHA256 600k | Yes | MTE2 v2; authenticated encryption — legacy v1 remains decryptable |
| AES-256-CBC | 256-bit | PBKDF2 | — | Legacy; needs separate HMAC for integrity |
| ChaCha20-Poly1305 | 256-bit | PBKDF2 / Argon2 | — | Modern AEAD; common on mobile TLS stacks |
| XChaCha20-Poly1305 | 256-bit | Argon2id | — | Extended nonce — safer for random IV reuse |
Need a strong password? Password generator.
Encrypt text with a password
Browser-native AES — nothing leaves your device.
FAQ
How secure is it?
It uses AES-256-GCM with PBKDF2-SHA256. New v2 encryption uses 600,000 iterations, while older 100,000-iteration ciphertext remains decryptable.
Where does encryption happen?
Entirely in your browser with the Web Crypto API. Your text and password are never uploaded.
What if I forget the password?
There is no recovery. Without the exact password the text cannot be decrypted — keep it safe.
Last updated: