AES Encryption & Decryption Tool

Encrypt and decrypt text using AES-256-GCM. Password-based key derivation with PBKDF2, random Salt and IV generated automatically. All processing runs locally in your browser.

What is AES Encryption?

AES (Advanced Encryption Standard) is a symmetric encryption algorithm widely used to protect sensitive data. AES-256-GCM provides both confidentiality and integrity verification, making it suitable for securing communications, files, and passwords. This tool uses the browser's Web Crypto API to perform all encryption and decryption locally.

AES-GCM vs AES-CBC

AES-GCM (Galois/Counter Mode) combines encryption with authentication, detecting any tampering with the ciphertext. AES-CBC (Cipher Block Chaining) only provides encryption without integrity verification. For new projects, AES-GCM is strongly recommended. AES-CBC should only be used for compatibility with legacy systems.

How Passwords Become AES Keys

This tool uses PBKDF2 (Password-Based Key Derivation Function 2) with SHA-256 to convert your password into an AES encryption key. A random Salt is generated each time to ensure the same password produces different keys. The default iteration count is 100,000, making brute-force attacks computationally expensive.

What are IV, Salt, and Authentication Tag?

IV (Initialization Vector) is a random value used to ensure the same plaintext encrypts differently each time. Salt is a random value added to password-based key derivation to prevent rainbow table attacks. The authentication tag (GCM only) verifies ciphertext integrity. All three are stored with the ciphertext and are required for decryption.

Is Browser Local Encryption Safe?

This tool uses the browser's built-in Web Crypto API, which implements standardized cryptographic algorithms. All encryption and decryption happens locally in your browser. Plaintext and passwords are not sent to any server. However, this tool does not replace professional password managers or enterprise key management systems.

Frequently Asked Questions

Is Base64 encryption?▼

No. Base64 is just encoding, not encryption. It can be decoded without a password and provides no security.

Why can't I use an empty password?▼

An empty password provides no protection. The tool requires a non-empty password to ensure meaningful security.

Can the website see my plaintext and password?▼

No. All processing happens locally in your browser using the Web Crypto API. Nothing is sent to any server.

Can I recover my data if I forget the password?▼

No. There is no backdoor or password reset. You must save your password securely.

Why is the encryption result different each time?▼

Each encryption generates new random Salt and IV values. This is a security feature that prevents pattern detection.

Should I choose AES-GCM or AES-CBC?▼

Use AES-GCM for new projects. AES-CBC should only be used for compatibility with legacy systems.

What happens if I modify the encrypted string?▼

AES-GCM will detect the modification and decryption will fail. This protects against tampering.

Is this tool suitable for encrypting files?▼

The current version supports text encryption. File encryption is planned for a future update.

All encryption and decryption is performed locally in your browser. Plaintext and passwords are not submitted to any server.