P
Guides
Language
Tools
Password & Security
P
Password Strength Checker
Score any password and estimate crack time
P
Password Generator
Create strong random passwords up to 128 chars
R
Random String Generator
Random tokens, IDs and keys with any charset
P
Passphrase Generator
Memorable multi-word passphrases (Diceware)
T
TOTP / 2FA Code Generator
Time-based one-time codes and otpauth secrets
P
Password Breach Checker
Check if a password appeared in known breaches
Hash & Crypto
S
SHA-256 Generator
Hash text to a 64-char SHA-256 digest
M
MD5 Generator
Compute the 32-char MD5 checksum of any text
S
SHA-1 Generator
Generate the 40-char SHA-1 hash of any input
S
SHA-512 Generator
Hash text to a 128-character SHA-512 digest
H
HMAC Generator
HMAC-MD5, SHA-1, SHA-256 & SHA-512 with secret key
B
bcrypt Generator / Checker
Hash passwords with bcrypt and verify hashes
P
PBKDF2 Key Derivation
Derive keys from a password with salt and iterations
A
AES Encrypt / Decrypt Text
Encrypt text with AES-256-GCM and a password
here
F
File Hash / Checksum
Compute SHA hashes of any file locally
Networking
I
IP Address Checker
Identify IPv4 vs IPv6, public/private and more
I
IPv4 Calculator
Network, broadcast, hosts, subnet mask & wildcard
I
IPv6 Calculator
Expand, compress and subnet IPv6 addresses
S
Subnet Calculator
CIDR ranges, wildcard masks and usable hosts
M
MAC Address Generator
Random valid MAC addresses, unicast or multicast
P
Port Checker
Learn what each TCP/UDP port number means
D
DNS Lookup
Resolve A, AAAA, MX, NS, TXT and CNAME records
W
WHOIS Lookup
Domain registration, expiry and registrar info
Web & HTTP
H
HTTP Header Analyzer
Security, caching & SEO headers explained
U
User-Agent Parser
Decode browser, OS and device from any UA
M
MIME Type Lookup
File extension to MIME type reference
H
HTTP Status Code Lookup
Every status code 1xx–5xx explained
U
URL Encoder / Decoder
Percent-encode URLs and parse query strings
C
Color Contrast Checker (WCAG)
Check text contrast against WCAG AA & AAA
Developer Utilities
U
UUID / ULID Generator
UUID v4, v7, ULID and NanoID in bulk
J
JWT Decoder & Signer
Decode, inspect and sign JSON Web Tokens
B
Base64 Encoder / Decoder
Encode and decode Base64, standard or URL-safe
Q
QR Code Generator
QR codes for links, Wi-Fi and vCards
J
JSON Formatter & Validator
Format, minify and validate JSON instantly
T
Unix Timestamp Converter
Convert Unix timestamps to dates and back
R
Regex Tester
Test regular expressions with live matches
D
Diff Checker
Compare two texts and highlight differences
L
Lorem Ipsum Generator
Placeholder paragraphs, sentences or words
N
Number Base Converter
Convert between binary, octal, decimal and hex
C
Color Converter (HEX / RGB / HSL)
Convert colors and copy HEX, RGB or HSL
C
CSV to JSON Converter
Convert CSV to JSON and JSON back to CSV
C
Case Converter & Slug Generator
camelCase, snake_case, kebab-case, Title & slug
W
Word & Character Counter
Words, characters, sentences and reading time
AES Encrypt / Decrypt Text · 100% Private
100% Free · No Signup · No Server

AES Encrypt / Decrypt Text

Protect a message with real encryption. Your text is encrypted with AES-256-GCM using a key derived from your password with PBKDF2, and the result is one shareable Base64 string that packs the salt, IV and ciphertext together. Decryption happens entirely in your browser.

AES-256-GCM (authenticated)
PBKDF2 key derivation
Salt + IV bundled
Nothing leaves the browser
Advertisement
Advertisement
Trusted & free

It is completely free, private and requires no signup.

Use 16+ characters

Length is the single biggest factor in password strength.

Never reuse passwords

A unique password per account limits the damage of any breach.

Use a password manager

Store strong generated passwords in a reputable manager.

Enable 2FA

Two-factor authentication protects accounts even if a password leaks.

You might also like
256
Bit key
GCM
Mode
150k
PBKDF2 iterations
0
Uploads
Step by Step

How it works

Protect a message with real encryption. Your text is encrypted with AES-256-GCM using a key derived from your password with PBKDF2, and the result is one shareable Base64 string that packs the salt, IV and ciphertext together. Decryption happens entirely in your browser.

Type or paste the text you want to protect in the Encrypt tab.

Use a long, unique passphrase — it is the only thing standing between the ciphertext and your message.

Paste the Base64 output into the Decrypt tab with the same passphrase to recover the text.

Examples & Data

Examples & Data

Plaintext Base64 ciphertext (start)
Meet me at noon k3Fq7bY2nW...
password=secret Zk9T1sQ8rA...

Every encryption uses a fresh random salt and IV, so the same message never produces the same output twice.

All tools

Password Strength Checker
Score any password and estimate crack time
Password Generator
Create strong random passwords up to 128 chars
Random String Generator
Random tokens, IDs and keys with any charset
Passphrase Generator
Memorable multi-word passphrases (Diceware)
TOTP / 2FA Code Generator
Time-based one-time codes and otpauth secrets
Password Breach Checker
Check if a password appeared in known breaches
SHA-256 Generator
Hash text to a 64-char SHA-256 digest
MD5 Generator
Compute the 32-char MD5 checksum of any text
SHA-1 Generator
Generate the 40-char SHA-1 hash of any input
SHA-512 Generator
Hash text to a 128-character SHA-512 digest
HMAC Generator
HMAC-MD5, SHA-1, SHA-256 & SHA-512 with secret key
bcrypt Generator / Checker
Hash passwords with bcrypt and verify hashes
PBKDF2 Key Derivation
Derive keys from a password with salt and iterations
AES Encrypt / Decrypt Text
Encrypt text with AES-256-GCM and a password
File Hash / Checksum
Compute SHA hashes of any file locally
IP Address Checker
Identify IPv4 vs IPv6, public/private and more
IPv4 Calculator
Network, broadcast, hosts, subnet mask & wildcard
IPv6 Calculator
Expand, compress and subnet IPv6 addresses
Subnet Calculator
CIDR ranges, wildcard masks and usable hosts
MAC Address Generator
Random valid MAC addresses, unicast or multicast
Port Checker
Learn what each TCP/UDP port number means
DNS Lookup
Resolve A, AAAA, MX, NS, TXT and CNAME records
WHOIS Lookup
Domain registration, expiry and registrar info
HTTP Header Analyzer
Security, caching & SEO headers explained
User-Agent Parser
Decode browser, OS and device from any UA
MIME Type Lookup
File extension to MIME type reference
HTTP Status Code Lookup
Every status code 1xx–5xx explained
URL Encoder / Decoder
Percent-encode URLs and parse query strings
Color Contrast Checker (WCAG)
Check text contrast against WCAG AA & AAA
UUID / ULID Generator
UUID v4, v7, ULID and NanoID in bulk
JWT Decoder & Signer
Decode, inspect and sign JSON Web Tokens
Base64 Encoder / Decoder
Encode and decode Base64, standard or URL-safe
QR Code Generator
QR codes for links, Wi-Fi and vCards
JSON Formatter & Validator
Format, minify and validate JSON instantly
Unix Timestamp Converter
Convert Unix timestamps to dates and back
Regex Tester
Test regular expressions with live matches
Diff Checker
Compare two texts and highlight differences
Lorem Ipsum Generator
Placeholder paragraphs, sentences or words
Number Base Converter
Convert between binary, octal, decimal and hex
Color Converter (HEX / RGB / HSL)
Convert colors and copy HEX, RGB or HSL
CSV to JSON Converter
Convert CSV to JSON and JSON back to CSV
Case Converter & Slug Generator
camelCase, snake_case, kebab-case, Title & slug
Word & Character Counter
Words, characters, sentences and reading time

Ready to try it?

It is completely free, private and requires no signup.

Use the tool now
100% Free No signup Private & secure
Advertisement
Help Center

Frequently Asked Questions

Yes. AES-256-GCM is authenticated encryption used across the industry, and the key is derived from your password with PBKDF2 over 150,000 iterations.

It packages three things: a random salt, a random IV (nonce) and the encrypted text with its authentication tag. All are needed to decrypt.

Only with software that follows the exact same construction (AES-256-GCM with PBKDF2-SHA256 and the same iteration count). The bundled salt and IV make that possible.

The message is unrecoverable. There is no backdoor and no reset — that is exactly what makes the encryption trustworthy.

Advertisement