AES-256 Encrypt / Decrypt
Password-based AES-256-GCM encryption performed entirely in your browser with the native Web Crypto API.
How the encryption works
Your password is stretched with PBKDF2-SHA256 (150,000 iterations, random 16-byte salt) into a
256-bit AES-GCM key. Each message gets a fresh random 12-byte IV. The output is a single Base64
string in the self-describing format TF1.salt.iv.ciphertext — salt and IV travel with
the message, so only the password needs to be remembered to decrypt. GCM also provides integrity:
a wrong password or tampered ciphertext fails instead of returning garbage.
FAQ
Can you recover my password?
No. The password never exists anywhere except this page's memory. Lose it and the ciphertext is unrecoverable.
Can I decrypt the output in other tools?
The format is specific to this tool. OpenSSL compatibility (e.g. enc -aes-256-gcm interop) is on the roadmap.
Is my plaintext or password uploaded?
No. Everything — key derivation, encryption, decryption — happens locally.