Encrypt & Decrypt Text
AES-256 password encryption, in-browser.
Runs entirely in your browser — nothing you enter is uploaded, logged, or tracked.
Lock a message behind a password using authenticated AES-256-GCM, with the key derived via 200,000 rounds of PBKDF2 — all locally, so neither the text nor the password is ever transmitted.
AES-256-GCM with a random salt + IV per message; the password is stretched with 200,000 rounds of PBKDF2-SHA-256. Everything runs in your browser via Web Crypto — nothing is uploaded.
Frequently asked questions
How strong is the encryption?
AES-256-GCM (authenticated encryption) with a random salt and IV per message, and the password stretched through 200,000 rounds of PBKDF2-SHA-256 — the same primitives used in serious cryptographic software, via the browser’s Web Crypto.
Can you recover my text if I forget the password?
No — and neither can anyone else. There’s no backdoor and nothing is stored or sent anywhere. Lose the password and the ciphertext is unrecoverable, which is the point.