AES Encrypt / Decrypt
Encrypt and decrypt text with AES-256-GCM using a password (client-side).
About this tool
Encrypt and decrypt text with AES-256-GCM using a password (client-side). Handy for auth debugging, test fixtures, and moving data between transport formats like Base64, URL encoding, and tokens.
Enter the plaintext and a password for AES-256-GCM (PBKDF2-derived key). Encrypt to get a JSON payload containing salt, IV, and ciphertext. Example — Round-trip demo payload: try `plaintext: hello password: correct-horse` and expect something like `{"v":1,"salt":"…","iv":"…","ciphertext":"…"}`. Client-side demo/testing only — not a substitute for proper key management.
Client-side demo/testing only; not a substitute for proper key management, HSM/KMS, or audited crypto services. See also: HMAC Generator, and Base64 Encoder/Decoder. Runs in your browser — nothing you paste gets uploaded.
How to use
- Enter the plaintext and a password for AES-256-GCM (PBKDF2-derived key).
- Encrypt to get a JSON payload containing salt, IV, and ciphertext.
- Decrypt by pasting that payload back with the same password.
- Use only for demos, tutorials, and local experiments.
Example
Round-trip demo payload
Input
plaintext: hello password: correct-horse
Output
{"v":1,"salt":"…","iv":"…","ciphertext":"…"}Client-side demo/testing only — not a substitute for proper key management.
Limitations
- Client-side demo/testing only; not a substitute for proper key management, HSM/KMS, or audited crypto services.
- Password strength and browser integrity determine real-world safety of anything you encrypt here.
- Interoperability with arbitrary external AES libraries depends on matching KDF, IV, and packaging format.
Related guides
1Related tools
2Frequently asked questions
What does the AES Encrypt / Decrypt do?
Encrypt and decrypt text with AES-256-GCM using a password (client-side). Runs in your browser — no install, no account.
How do I use the AES Encrypt / Decrypt?
Enter the plaintext and a password for AES-256-GCM (PBKDF2-derived key). Encrypt to get a JSON payload containing salt, IV, and ciphertext. Decrypt by pasting that payload back with the same password. Use only for demos, tutorials, and local experiments.
Is the AES Encrypt / Decrypt free?
Yes. No signup, no usage limits, no paywall.
Does the AES Encrypt / Decrypt upload my data?
No. Processing happens locally in JavaScript. Your input is not uploaded, stored, or logged.
What are the limitations of the AES Encrypt / Decrypt?
Client-side demo/testing only; not a substitute for proper key management, HSM/KMS, or audited crypto services. Password strength and browser integrity determine real-world safety of anything you encrypt here. Interoperability with arbitrary external AES libraries depends on matching KDF, IV, and packaging format.