← All security tools

AES encrypt / decrypt

Encrypt

Passphrase + plaintext in; ciphertext out. Reverse to decrypt. Keys never leave the tab.

Runs in your browser. Inputs stay on this device — nothing is uploaded to BrowserSpaces for processing.

AES-GCM

Authenticated encryption.

PBKDF2

Passphrase → key.

Portable blob

IV + salt + ciphertext, base64.

Use the tool

How it works

How AES works here

Salt and IV are random per message. PBKDF2 derives a 256-bit key; AES-GCM encrypts. The exported blob packs salt, IV, and ciphertext.

Before you start

  • Lost passphrase = lost data.
  • This is a utility, not a full vault product.

Three steps

  1. 1

    Passphrase

    Choose something strong.

  2. 2

    Encrypt or decrypt

    Pick the mode.

  3. 3

    Copy blob

    Store or send the result yourself.