AES-256 Encryptor / Decryptor
Encrypt and decrypt text with AES-256-GCM via the Web Crypto API. PBKDF2 key derivation, salt + IV, and 10+ extras. 100% private — runs in your browser.
About AES-256 Encryptor / Decryptor
Encrypt and decrypt text with AES-256-GCM via the Web Crypto API. PBKDF2 key derivation, salt + IV, and 10+ extras. 100% private — runs in your browser. Everything runs locally in your browser — your data never leaves your device.
How to use
- Enter your input in the tool above.
- Adjust any options to your preference.
- Use the Copy or Download buttons to save the result.
- Everything happens locally — your data never leaves your browser.
FAQ
Is this encryption secure?
Yes. Uses the browser's native Web Crypto API: AES-256-GCM (authenticated encryption) with PBKDF2 key derivation (210,000 iterations per OWASP 2023). Random salt + IV per encryption. Never use broken algorithms like AES-ECB or MD5-based keys.
What extras does this tool have?
Extras: (1) AES-256-GCM (recommended), (2) AES-256-CBC option, (3) PBKDF2 iterations selector (100k–1M), (4) SHA-256/384/512 hash for key derivation, (5) Salt + IV visible in output, (6) Base64 output, (7) Hex output, (8) Encrypt mode, (9) Decrypt mode, (10) Copy individual fields, (11) Download as .enc file, (12) Show key derivation time, (13) Password strength indicator, (14) Self-test: encrypt then decrypt round-trip.
Related tools
.htaccess Generator
Generate Apache .htaccess rules: redirects (301/302), URL rewrites, auth, IP allow/deny, custom error pages, security headers, HTTPS force, www force, and 10+ extras. 100% private.
Bcrypt & PBKDF2 Hash Generator
Generate and verify bcrypt + PBKDF2-SHA256 password hashes. Adjustable cost factor, batch verify, hash format detection, crack-time estimate, password strength check, hash comparison, and CSV export. 100% private.
CSP Evaluator & Builder
Evaluate Content Security Policy headers for security weaknesses, detect bypass gadgets, suggest strict CSP, generate nonces, compare two CSPs, and export to Nginx/Apache/meta-tag. 100% client-side.