Loading…
Loading…
Encrypt a message or note with a password using AES-256-GCM, and decrypt it later. Runs in your browser — the text and password never leave the page.
Also covers: Encryption tool · Decryption tool · Encrypt message with password · AES encryption online
There's no way to recover data if you forget this password — store it in a password manager.
Everything runs in your browser — nothing you type or generate is sent anywhere. AES-256-GCM with a key derived from your password (PBKDF2-SHA256, 600,000 iterations). The encrypted text can only be decrypted here, with the same password.
Enter text and a password, then Encrypt
Use a long, unique password or passphrase — anyone who gets the encrypted text can try passwords offline.
The result is a block of Base64 text you can paste into an email, chat, or note. Every encryption is different, even with the same text and password.
Switch to Decrypt, paste the block, and enter the same password. Any change to the encrypted text, or a wrong password, is detected.
It uses AES-256-GCM (AES-GCM is the authenticated encryption most HTTPS connections use), with a key derived from your password by PBKDF2-SHA256 at 600,000 iterations to slow down guessing. Security then depends on your password's strength.
No. Nothing is stored anywhere, and there's no backdoor. Without the password, the text can't be decrypted.
No — the output uses this tool's own format (salt, IV, and ciphertext in one Base64 block), so decrypt it here. For sharing with other software, use a standard tool like GPG or age.
No. Everything is generated and processed in your browser with its built-in cryptography. Nothing you type or generate is uploaded, logged, or stored.
Passwords
Generate strong random passwords in your browser: choose length and character types, skip look-alike characters, and make up to 500 at once.
Passwords
Generate strong, memorable passphrases from the EFF's 7,776-word list, picked with secure randomness. Choose word count, separators, and capitals.
Passwords
Generate random 4, 6, or 8-digit PINs that skip easy guesses like 1234, 1111, years, and dates. Secure randomness, generated in your browser.
Passwords
Check how strong a password really is: estimated crack times, the words and patterns that make it guessable, and tips to improve it. Never leaves your browser.
Keys
Generate random strings, API keys, and secret keys: pick the length and characters (hex, Base64url, alphanumeric, custom) or a key size in bytes. Cryptographically secure.
2FA
Get live 2FA codes from a TOTP secret or otpauth:// link, check a code, or create a new secret with a QR code for authenticator apps. RFC 6238.