Dev Tools
Data Encrypter/Decrypter
AES-256-GCM in the browser. The password never leaves this tab; the ciphertext carries its own salt and IV.
AES-256-GCM · PBKDF2-SHA256 · 210,000 iterations · salt and IV travel with the ciphertext · nothing leaves this browser
Input
Output
AES-256 encrypt and decrypt in the browser
Wrap a short secret or config blob with AES-GCM in this tab. The key and ciphertext stay on your machine. This is a utility, not a vault — do not use it as your production key store.
1. Enter the plaintext and a passphrase
The page derives a key and encrypts with AES-GCM. You get a payload you can store or send.
2. Decrypt with the same passphrase
Paste the ciphertext back and use the same passphrase. A wrong passphrase fails closed.
3. Treat it as local tooling
Good for a config snippet on your laptop. Wrong for long-term storage of production keys or customer data.
Frequently asked questions
- What algorithm does this use?
- AES-256-GCM via the Web Crypto API, in the browser. We do not see the key or the text.
- Can I recover a forgotten passphrase?
- No. There is no account and no escrow. Lost passphrase means lost plaintext.
- Should I encrypt production secrets here?
- Use your real secret manager. This page is for local experiments and short-lived blobs you would otherwise leave in a notes app.