Skip to main content

Authorized use only. Use this tool solely on systems, tokens, and assets you own or are explicitly permitted to test — credential extraction, signature forging, and unauthorized access are prohibited by our Acceptable Use Policy.

Text Encryption/Decryption

Encrypt

Decrypt

About the Encryption

AES encryption protects sensitive text — API keys, passwords, personal notes — by converting it into ciphertext that only the right key can decrypt. AES-256 is the standard used by banks, governments, and HTTPS itself.

This tool encrypts and decrypts text using AES directly in your browser via the Web Crypto API. Your plaintext and keys never touch a server. Choose AES-CBC or AES-GCM mode, paste your text, and encrypt instantly.

How to use

  1. Select encrypt or decrypt mode.
  2. Enter your text and a secret key.
  3. Choose the encryption mode (GCM is recommended).
  4. Click encrypt — the result appears instantly, all client-side.

Frequently Asked Questions

Is browser-based AES encryption secure? ▾

The Web Crypto API uses the same AES implementation as your browser TLS stack. For encrypting sensitive notes or test data, it is cryptographically sound. For production key management, use a dedicated service like AWS KMS or HashiCorp Vault.

What is the difference between AES-CBC and AES-GCM? ▾

GCM (Galois/Counter Mode) provides both encryption and authentication — it detects if ciphertext was tampered with. CBC only encrypts and is vulnerable to padding oracle attacks without a separate MAC. Always prefer GCM.