AES Encryption

Encrypt and decrypt text with AES-256 (GCM or CBC) right in your browser. Password-based with PBKDF2 key derivation — nothing is uploaded anywhere.

Encryption runs locally in your browser. Nothing is uploaded, logged, or stored.

How to encrypt and decrypt text with AES

AES (Advanced Encryption Standard) is the algorithm trusted worldwide for protecting sensitive data. This tool gives you AES-256 with a key derived from your password using PBKDF2 — 150,000 rounds of SHA-256.

Everything runs locally in your browser through the Web Crypto API. Your password and your data never leave the page, and nothing is stored or transmitted.

Pick a mode and algorithm

Use the Encrypt tab to protect text and Decrypt to recover it. For encryption, choose AES-GCM (authenticated, recommended) or AES-CBC (legacy compatibility); decryption detects the algorithm automatically.

Enter a strong password

Your password is the only thing that can unlock the data, so make it long and unique. The key is derived with PBKDF2 and a salt, which slows down brute-force attempts dramatically.

Understand salt and IV

A random salt and a random IV are generated for every encryption and packed into the output blob. After encrypting, you can inspect their base64 values below the result.

Share safely

Copy the full base64 blob and share it together with the algorithm — the recipient just needs the password and this tool. Without the password the data is unreadable, even to us: nothing is ever uploaded.

Frequently Asked Questions

Is this encryption secure?+
Yes. It uses AES-256 through the browser's native Web Crypto API, with a 256-bit key derived from your password via PBKDF2 (150,000 rounds of SHA-256). AES-GCM also authenticates the data, so tampering is detected automatically.
Is my password or text uploaded anywhere?+
No. Encryption and decryption run entirely in your browser. Your password, plaintext, and ciphertext never leave the page — no server is involved at all.
What is the difference between AES-GCM and AES-CBC?+
AES-GCM is an authenticated mode: it detects whether the ciphertext was modified and is recommended for new encryptions. AES-CBC is offered for compatibility with older systems but does not verify integrity on its own.
What is the salt for?+
The salt ensures the same password produces a different key for every message. Leave it empty for a random salt (recommended), or enter a fixed text if you need reproducible output. The salt is packed into the encrypted blob automatically.
Why can't I decrypt my data?+
Decryption almost always fails because the password is wrong — the 'wrong password' message means the derived key didn't match. The input must be the complete base64 blob this tool produced, since it bundles the salt and IV together with the ciphertext.

Related Tools

Hash GeneratorPassword Strength CheckerBase64 Encoder

AES Encryption — free online aes encryption, aes encrypt online, aes decrypt online, aes 256 encryption tool, encrypt text online, password encryption, aes gcm, aes cbc, browser encryption tool, free text encryption. No signup required. Works in your browser.