AES Encryption / Decryption

Encrypt and decrypt text with AES-GCM or AES-CBC using your own key. All cryptographic operations run locally in your browser.

Input

Algorithm

Key size

Passphrase (we derive a key with PBKDF2-SHA256) Plaintext / Ciphertext

Output

Format

Ciphertext output format: salt(16).iv(12).ct(base64) all base64-encoded in one blob. For CBC, IV is 16 bytes. For GCM, IV is 12 bytes and includes authentication tag.

⚠️ Important

Do not encrypt production secrets in a web form.
PBKDF2 iterations: 100,000 (strong, but slow on weak devices).
This tool is for education and quick experiments. Use a real KMS for production.

About AES Encryption / Decryption

AES (Advanced Encryption Standard) is a symmetric block cipher used worldwide to encrypt data with a shared secret key. This tool supports two modes: AES-GCM, which adds authentication so any tampering is detected, and AES-CBC, which encrypts without authentication and should not be used with untrusted data. A passphrase is stretched into the actual encryption key using PBKDF2-SHA256.

Use this tool when you need a quick client-side encryption experiment or want to see how AES modes behave with real inputs. Do not use it to process production keys — a web form is not a secure key-management environment. Prefer AES-GCM over CBC whenever possible, and keep passphrases long and unique, since PBKDF2 slows down but never fully prevents offline guessing.