AES encrypt / decrypt

Processed in this browser

Text limit: 2000000 characters

This tool never uploads your input.

Encrypt or decrypt text with AES-GCM and a password derived in this tab. It is a test bench. It is not a password manager, not ‘military-grade,’ and if you forget the password the bytes are gone.

You want to round-trip a string with AES-GCM and a password, without sending either to a “encrypt online” host. That is this page.

Not password generator. Not hash generator. Not HMAC. We will not say military-grade.

How to use it

  1. Paste plaintext or ciphertext. Enter the password.
  2. Encrypt or decrypt in this tab.
  3. Store the password somewhere that is not this page. Lose it and the data is gone.

Honest limits

  • Not a file vault (no 32 MB disk encryption product).
  • Not WhatsApp-level messaging E2E.
  • Ciphertext from another site’s mystery CBC+MD5 will not decrypt here.

This is a local test bench, not a compliance control.

FAQ

Is this a password manager?

No. Generate passwords elsewhere and store them in a real vault. This page encrypts a blob you paste.

What mode and key size?

AES-GCM with a password-derived key in this tab. Interop with OpenSSL CLI or a random ‘AES CBC online’ site is not promised — match IV, KDF, and encoding or decrypt will fail.

Should I encrypt real secrets here?

Only if you understand the threat model. Local is better than a server toy, still worse than an audited tool you chose on purpose.

Is hashing the same thing?

No. Hash generator is one-way. HMAC is keyed integrity. AES here is reversible with the password.

Is the plaintext uploaded?

No. Still treat the password like a secret.

Related tools