SEOlust logo SEOlust
Security & Privacy

Text Encryptor (AES-256)

Encrypt and decrypt text with a password using AES-256-GCM via your browser's Web Crypto. Nothing is uploaded. Free.

All tools

💡 How to use

  • Enter a password and your message, then Encrypt. Share the Base64 output and the password separately.
  • To read it, the recipient pastes the output, enters the same password, and chooses Decrypt.
  • Uses AES-256-GCM with PBKDF2 via your browser's built-in Web Crypto. Nothing is uploaded — if you lose the password, the text cannot be recovered.

Free Text Encryptor — AES-256 Password Encryption

Encrypt and decrypt text with a password, right in your browser. This tool uses AES-256-GCM with PBKDF2 key derivation via the browser's built-in Web Crypto, so your message and password never leave your device. Share the encrypted output safely and decrypt it with the same password. Free, no sign-up.

What this tool does

It turns readable text into an encrypted, unreadable string that can only be turned back into the original by someone who knows the password. This is useful for sending a sensitive note through an insecure channel — you paste the encrypted output into an email or chat, and share the password separately so that intercepting the message alone reveals nothing.

How to use it

It is straightforward:

  • Choose Encrypt, enter a strong password, and type your message.
  • Click Encrypt and copy the Base64 output.
  • Send the output and the password through different channels.
  • The recipient chooses Decrypt, pastes the output, and enters the same password.

The encryption behind it

The tool uses AES-256-GCM, a modern authenticated cipher, with a key derived from your password using PBKDF2 (150,000 iterations, SHA-256) and a random salt. A fresh random salt and initialization vector are generated every time you encrypt, so encrypting the same text twice produces different output. GCM also verifies integrity, so tampering or a wrong password is detected rather than producing garbage.

Choosing a strong password

The security of your message depends entirely on the password. Use a long, unique passphrase — several random words or 12+ mixed characters — rather than a common word or something guessable. Because the key is stretched with PBKDF2, brute-forcing is slow, but a weak password is still the easiest way in. There is no backdoor: if the password is lost, the text cannot be recovered.

When to use it

Reach for text encryption when you need to store or send a small secret — a note, a set of credentials you will rotate, an address, or a private message — without trusting the channel it travels through. It is not a replacement for full end-to-end encrypted messengers or password managers, but it is perfect for one-off encrypted snippets you can paste anywhere.

Privacy

Everything happens locally using your browser's Web Crypto API — your text, your password, and the derived key never touch a server, and nothing is logged or stored. You can safely encrypt genuinely sensitive text, because there is no upload step for anyone to intercept.

FAQ

Is this text encryptor free?
Yes. It is completely free, runs in your browser, and needs no account or sign-up.
What encryption does it use?
AES-256-GCM with a key derived from your password using PBKDF2 (150,000 iterations, SHA-256) and a random salt, all via the browser's built-in Web Crypto API.
Is my text or password uploaded?
No. Encryption and decryption run entirely in your browser, so neither your message nor your password ever leaves your device.
What happens if I forget the password?
The text cannot be recovered. There is no backdoor or reset — that is what makes the encryption secure. Keep the password safe.
Why does the same text produce different output each time?
A fresh random salt and initialization vector are generated on every encryption, so identical text encrypts to different strings. This is a security feature.
Can someone tell if the decryption failed?
Yes. AES-GCM verifies integrity, so a wrong password or altered input is reported as an error instead of returning incorrect text.
Is this as secure as a password manager?
The cipher is strong, but this tool is meant for encrypting small pieces of text you paste elsewhere. For storing many credentials long-term, a dedicated password manager is the right choice.

Related tools

Pro tip: pair this tool with Robots.txt Exposure Checker and Cookie Security Checker for a faster SEO workflow.