Encrypt and decrypt text with AES-GCM and a password-derived key — all in your browser.
Strong · 85 bits
Cipher options
Output encoding:
The encrypted blob will appear here.
How it works
AES ( GCM, CBC or CTR at 128 / 192 / 256-bit), with the key either derived from your password via PBKDF2-SHA256 (configurable iterations) or supplied directly as a raw key.
container: HAE1 | ver | algo | keyBytes | kdf | iters | saltLen | ivLen | salt | iv | ciphertext
Every parameter is stored in the header, so decrypt recovers the exact settings from the blob — you only need the password or key. A fresh random salt and IV are generated per encryption, so the same input yields a different blob each time. AES-GCM additionally authenticates the data; CBC and CTR do not. Everything runs locally in your browser — nothing is uploaded.
