Text Encryptor (AES)

Encrypt or decrypt text with your own password — runs entirely in your browser.

Text Encryptor (AES) makes this small but important security step practical to actually do. Text Encryptor (AES) lets you do this quickly and safely without relying on anything else. The whole process happens locally in your browser; nothing is sent to a server.

Step-by-step

  1. Type or paste your content into Text. To decrypt, paste the ciphertext that this tool produced earlier.
  2. Enter a strong password in Password. A phrase of several random words works well. For decryption it has to match the original exactly.
  3. Pick encrypt or decrypt from the Mode list.
  4. Click Run and copy the full output. Losing even one character means it won't decrypt.

Example

You need to send a colleague some server login details by email. Paste them into Text, choose encrypt, set a strong password and run it. Put the scrambled output in the email, then tell your colleague the password over the phone. They open this page, choose decrypt, enter the text and the password, and get the original back. If the email ends up in the wrong inbox, it's unreadable without the password.

How does the encryption work under the hood?

The tool does not use your password directly as the key. It turns the password plus a salt into a key with PBKDF2 (SHA-256, 150,000 iterations) and encrypts the text with AES-GCM. The iteration count slows down every guess someone makes against your password, and AES-GCM also lets decryption detect whether the ciphertext was tampered with. All of this runs on your browser's built-in Web Crypto.

Practical tips

  • The longer and less guessable the password, the stronger the result; no algorithm can rescue a short password.
  • Send the password to the recipient through a different channel than the encrypted text (for example, the text by email and the password by phone).
  • If even one character of the password is wrong, decryption fails. That is normal and part of the security.

Common mistakes

  • Forgetting the password: it is not stored anywhere, so there is no way to recover it.
  • Missing a character at the end when copying the encrypted text; decryption then fails.
  • Relying only on this tool for a critical document; use backups and proper enterprise solutions for vital data.

Things to keep in mind

  • Never send the ciphertext and the password through the same channel. If both are in one message, the encryption adds nothing.
  • A short, guessable password undermines even a strong cipher. Skip birthdays and names.
  • Don't assume another AES tool can open text encrypted here. Tools differ in how they derive keys and format output, so decrypt with this page's decrypt mode.
  • For sensitive data you share often, a password manager or an end-to-end encrypted messenger may be a better long-term fit.