Text Encrypt / Decrypt Tool

Text Encrypt / Decrypt Tool protects text with a password using the browser’s built-in Web Crypto API. A 256-bit AES-GCM key is derived from your password with PBKDF2-HMAC-SHA-256 (600,000 iterations) and a random salt, and each encryption uses a new random IV. The output is a single self-contained line that includes the format version, iteration count, salt, IV and ciphertext, and can be decrypted here with the same password.

Sometimes you need to send or store a short secret — a note, a configuration value or a message — somewhere you don’t fully trust. Encrypting it with a strong password first means only someone with the password can read it. Because standard algorithms are used and nothing leaves your browser, there is no account and no server involved.

1. Choose Encrypt.
2. Type or paste the text you want to protect.
3. Enter a strong password and type it again to confirm.
4. Press Encrypt, then copy or download the encrypted text.
5. To read it later, choose Decrypt, paste the encrypted text, enter the password and press Decrypt.
6. Press Reset when you are done to clear the text and passwords.

• AES-256-GCM authenticated encryption via the Web Crypto API
• PBKDF2-HMAC-SHA-256 key derivation with 600,000 iterations
• Random 16-byte salt and 12-byte IV for every encryption
• Self-contained, versioned output format
• Confirm-password check before encrypting
• Clear errors for wrong passwords, damaged text and unsupported browsers
• Copy and download for encrypted and decrypted text
• Fields cleared on Reset and when the page is closed

• Use a long passphrase of several random words, and don’t reuse it elsewhere.
• Store the password separately from the encrypted text — for example in a password manager.
• Share the password through a different channel than the encrypted message.
• Test decryption before deleting the original text.
• Use dedicated, audited software for regulated, financial, medical or other high-risk data.