Security

Encrypt text

Encrypt a message with a password (AES-GCM + PBKDF2), safe to share.

  • Instant
  • Free
  • Private (processed locally)
  • No sign-up
Result

Everything is encrypted locally (WebCrypto). The password is never sent or stored.

A secret message, password-protected

To pass on a password, a private note or sensitive details, this encryptor protects your text with 256-bit AES-GCM from a simple secret phrase, with no server or sign-up.

  1. Write and encrypt

    Enter the text and a strong password, then encrypt.

  2. Share the block

    Send the base64 result over the channel of your choice.

  3. The recipient decrypts

    With the same password, shared separately.

Under the hood

ElementDetail
EncryptionAES-GCM 256-bit (authenticated)
KeyPBKDF2, SHA-256, 150,000 iterations
RandomnessSalt and IV from crypto.getRandomValues
Outputbase64 of (salt + IV + ciphertext)

Everything is encrypted locally (WebCrypto). Security depends on password strength and sharing it separately.

Frequently asked questions

How does the encryption work?

Your password is turned into an AES-256 key by PBKDF2 (150,000 iterations, SHA-256) with a random salt, then the text is encrypted in AES-GCM with a random initialization vector. The result (salt + IV + ciphertext) is base64-encoded, ready to copy.

Does the recipient need software?

No: they just open this tool, paste the encrypted text and enter the same password you shared through another channel. Decryption happens in their browser, with no install.

Is it really secure?

The algorithm (AES-GCM 256 + PBKDF2) is a recognised standard, and everything happens locally via WebCrypto. Security mostly depends on password strength: choose a long, unique phrase and share it on a channel separate from the message.

What happens if the password is wrong?

Decryption fails cleanly: AES-GCM verifies the data’s authenticity. A wrong password, or ciphertext altered by a single character, produces an error rather than a silently wrong result.