Encrypt text with a password

Encrypt a message with a password so that only someone who knows it can read it. It uses AES-256-GCM, the standard symmetric cipher, and everything happens in your browser: neither the text nor the password are sent to any server.

How does this encryption work?

A 256-bit key is derived from your password with PBKDF2-SHA256 (600,000 iterations and a random salt), and the text is encrypted with it using AES-256-GCM, which also detects any tampering with the encrypted message. The Base64 result includes the salt and the initialization vector, so you only need the password to decrypt it.

Because the salt and the vector are random, encrypting the same text twice with the same password gives different results, and both can be decrypted.

Is it secure?

The encryption is as strong as the password you choose: use a long, hard-to-guess password (you can create one with our password generator) and share it through a different channel than the message. If you lose the password there is no way to recover the text.

Encryption, encoding and hashing: the differences

Encryption can be reversed with the key; encoding (such as Base64) can be reversed by anyone, without a key; and a hash (such as MD5 or SHA-256) cannot be reversed. Choose the tool according to what you need.