Text Encryption
Modern authenticated encryption with PBKDF2-SHA-256, random salt and IV, and a versioned envelope. Wrong keys fail loudly.
Encrypt text
AES-256-GCM Encrypted payload
This self-describing JSON contains the version, KDF settings, salt, IV, and ciphertext. Share the passphrase
separately.
Decrypt payload
Auto-detect Decrypted text
No password recovery. Encryption uses AES-256-GCM with a 256-bit key derived through
PBKDF2-SHA-256 (210,000 iterations), a random 16-byte salt, a random 12-byte IV, and a 128-bit authentication tag.
The passphrase is held in memory only. If you lose it, the payload cannot be recovered.
Modern AIOT envelopes are authenticated: a wrong passphrase or modified payload fails with a clear error. Legacy CryptoJS OpenSSL payloads can be decrypted for compatibility, but new encryption always uses the modern envelope.
About Text Encryption
Encrypt text with AES-256-GCM and a passphrase, or decrypt legacy CryptoJS payloads.
This tool runs locally in your browser. It does not upload your input, require an account, or store your data on a server. If a feature needs a network request, the interface asks before sending anything.