Encrypt and decrypt text in your browser with AES-256-GCM. The key is derived from your password using PBKDF2-HMAC-SHA-256 with 600,000 iterations, a fresh random salt and IV, and the result is a self-contained JSON envelope you can copy or download.
AES-GCM Encrypt & Decrypt Tool protects a piece of text with a password using your browser’s built-in Web Crypto API. When you encrypt, the tool creates a new random 16-byte salt and a new random 96-bit IV with crypto.getRandomValues(), derives a 256-bit AES key from your password with PBKDF2-HMAC-SHA-256 and 600,000 iterations, and encrypts the UTF-8 text with AES-GCM. Because the salt and IV are new every time, encrypting the same text with the same password twice gives completely different output.
The result is a versioned JSON envelope containing only what is needed to decrypt: the version, algorithm, KDF, hash, iteration count, salt, IV and ciphertext, with binary values in Base64. The password is never included or stored. AES-GCM is authenticated encryption, so decryption either returns the exact original text or fails: a wrong password or any change to the envelope is reported as an authentication failure, and no partial text is ever shown. Forgotten passwords cannot be recovered.
No. The password is never stored or sent anywhere, and the envelope does not contain it. Without the correct password the text cannot be decrypted.
AES-GCM checks an authentication tag before releasing any text. If the password is wrong or any part of the envelope was changed, the check fails and nothing is shown. The tool cannot tell which of the two happened.
Each encryption uses a new random salt and IV, so the derived key and ciphertext are different every time. This is intended and prevents patterns from leaking.
The envelope contains no secrets — the salt and IV are designed to be public — but its safety depends on your password. Anyone who learns or guesses the password can decrypt it.
PBKDF2 with 600,000 iterations deliberately slows down key derivation, which makes guessing passwords much more expensive for an attacker.
No. This tool encrypts text only. It also does not store passwords or keys.
No. Malware, a malicious browser extension or someone watching your screen can capture text and passwords before encryption. A browser tool cannot protect a compromised device.
