Tool overview
What is an AES Encrypt/Decrypt Tool?
This tool encrypts and decrypts text with AES-GCM using a passphrase-derived key for quick local secret wrapping.
Why use this Encrypt / Decrypt tool?
Protect short secrets during demos or handoffs without sending plaintext to a hosted encryption site.
Key Features
AES-GCM, passphrase key derivation, encrypt/decrypt modes, and fully local Web Crypto operations.
How to Use
Follow these steps to get accurate results from the tool interface above.
- Enter a strong passphrase—used to derive the encryption key.
- Paste plaintext and choose Encrypt, or paste the payload JSON for Decrypt.
- Copy the encrypted bundle (salt, iv, ciphertext) for storage or transit.
- Decrypt with the same passphrase—wrong passphrases fail safely.
Encrypted Payload Format
Fields in the client-side AES-GCM envelope.
| Token Type | Valid Standard Format | Malformed Input |
|---|---|---|
| Payload envelope | { "salt":"…","iv":"…","ciphertext":"…" } | { "ciphertext":"only" }Missing salt or iv prevents deterministic key re-derivation. |
| Passphrase strength | Long unique passphrase or generated secret | password123Weak passphrases are vulnerable to offline guessing regardless of cipher. |
| Encoding | Base64 fields in JSON wrapper | Raw binary pasted in JSONCopy the full JSON envelope—not individual fields out of context. |
Security Profile
Encryption uses PBKDF2 + AES-GCM in the browser. This is not a substitute for managed KMS/HSM in regulated environments. Passphrases exist only in memory until you navigate away.
Frequently Asked Questions
Expandable answers for common debugging bottlenecks and data privacy questions.
Related tools
Explore other related utilities that complement this tool.
Official Documentation & References
Authoritative specifications and platform documentation for this utility.