Free Text Encryption

Strong, standard encryption: AES-256-GCM with a key derived from your password via PBKDF2 (250,000 iterations, SHA-256). Each message uses a fresh random salt and IV.

The password is never stored or sent anywhere — everything runs in your browser. If you lose the password, the message cannot be recovered. Share the encrypted text and the password through separate channels.

Open format: The output is base64 of salt (16 bytes) + IV (12 bytes) + ciphertext + 16-byte GCM tag, with the key from PBKDF2-SHA256 at 250,000 iterations. It is not OpenSSL or CryptoJS compatible, but you can decrypt it without this site, for example in Node.js:

const c = require('crypto');
const b = Buffer.from(B64, 'base64');
const k = c.pbkdf2Sync(PASSWORD, b.subarray(0, 16), 250000, 32, 'sha256');
const d = c.createDecipheriv('aes-256-gcm', k, b.subarray(16, 28));
d.setAuthTag(b.subarray(b.length - 16));
console.log(d.update(b.subarray(28, b.length - 16)) + d.final());