Free Online AES Encrypt / Decrypt Tool
Enter a password to encrypt or decrypt text with AES-256-GCM. The key is derived from your password locally in the browser β nothing leaves your device.
Key Features
AES-256-GCM
Military-grade authenticated encryption implemented with the browser's native Web Crypto API.
Password-Derived Key
The password is stretched with PBKDF2 to derive the key, resisting brute-force attacks.
Random IV
A random initialization vector is generated per encryption, making ciphertext unpredictable.
Zero Upload
Key and data stay in your browser the whole time β never sent to a server.
How to Use
Enter Content
Enter plaintext (to encrypt) or ciphertext (to decrypt).
Set a Password
Enter the password used to derive the key.
Run the Operation
Click Encrypt or Decrypt and the result is output automatically.
Frequently Asked Questions
Is the encryption algorithm secure?
It uses AES-256-GCM authenticated encryption, an industry-standard algorithm, combined with PBKDF2 key derivation and a random IV β secure enough for everyday text encryption.
Can I recover a forgotten password?
No. The key is derived from the password, so the password is the key and cannot be recovered. Keep it safe β losing it means the data cannot be decrypted.
What scenarios is it suitable for?
It suits small content like text, keys and config snippets. The ciphertext is Base64-encoded text, easy to copy, store and transfer.
Is my password sent to a server?
No. The password is only used in browser memory to derive the key. Encryption and decryption run entirely locally β no data is uploaded.