Encrypt and decrypt text using AES-256-GCM with password-derived keys via PBKDF2, entirely in the browser.
This tool turns a password into an AES-256 key with PBKDF2, then uses that key to encrypt or decrypt the text you paste, using AES-GCM so tampering is detectable. Nothing leaves the browser. The mistake people make most often: assuming two encryptions of the same text with the same password produce the same output. They won't, because a fresh random salt and IV are generated each time, and both are needed later to decrypt, so the tool bundles them with the ciphertext in the output rather than making you track them separately.
Your password is not used directly as the AES key. PBKDF2 repeatedly hashes it together with a randomly generated salt to stretch it into a 256-bit key, which makes brute-forcing the password against a stolen ciphertext far more expensive than hashing it once. A new salt is generated for every encryption, so the same password never derives the same key twice.
The derived key encrypts your plaintext under AES in Galois/Counter Mode with a freshly generated IV (initialization vector). GCM produces ciphertext plus an authentication tag; decryption fails outright if either the ciphertext or the tag has been altered, so corrupted or tampered input is rejected rather than silently decrypted into garbage.
Only if that tool used the exact same construction: AES-256-GCM, the same PBKDF2 iteration count and salt length, and the same way of packing salt, IV, ciphertext, and tag together. In practice, different tools rarely match on all of these, so treat this tool's output as compatible mainly with itself.
AES-256-GCM with PBKDF2 is a sound, standard construction, but this tool runs in your browser tab with no independent security audit stated on the page. For regulated or high-stakes data, that combination is a reasonable stopgap, not a substitute for a vetted, audited encryption product.
The behavioral notes were checked against the browser implementation. Standards and primary references below define the relevant format, formula, or platform behavior.
Generate strong, random passwords with customizable length, character sets, and complexity requirements.
Analyze password strength with entropy scoring, crack-time estimates, and improvement suggestions.
Create cryptographically random strings for API keys, tokens, salts, and unique identifiers.
Create QR codes for URLs, text, Wi-Fi credentials, vCards, and more with customizable size and colors.
Scan and decode QR codes from uploaded images or your device camera to extract embedded data.
Compute MD5, SHA-1, SHA-256, and SHA-512 checksums to verify file integrity and detect tampering.