Password Encryption Utility
Use this free Password Encryption Utility to quickly get accurate results in seconds, free and instantly offline with no signup required ever, trusted by professionals in Austin, Chicago, Miami, Denver, Seattle, and New York for reliable daily use without accounts, subscriptions, limits, or delays on any device for everyday personal and business workflows daily.
Encrypt text with a password using AES-256-GCM in your browser with this password encryption utility, and decrypt with the same password.
Calculator Inputs
About Encrypt Text
Use this free Password Encryption Utility to quickly get accurate results in seconds, free and instantly offline with no signup required ever, trusted by professionals in Austin, Chicago, Miami, Denver, Seattle, and New York for reliable daily use without accounts, subscriptions, limits, or delays on any device for everyday personal and business workflows daily.
Password Encryption Utility: This free tool encrypts and decrypts text using AES-256-GCM - the same military-grade encryption standard used by banks and governments. Your password is stretched through PBKDF2 with 100,000 iterations and a random salt, producing a 256-bit key that encrypts your message. All encryption happens instantly offline with no signup required ever.
How Encryption Works: When you encrypt, the tool generates a random 16-byte salt and 12-byte IV, derives a 256-bit key from your password using PBKDF2-SHA256 with 100,000 iterations, then encrypts with AES-GCM. The output bundles salt, IV, and ciphertext in a single dotted string: base64(salt).base64(iv).base64(cipher).
Decryption: To decrypt, paste the bundle and enter the same password. The tool extracts the salt and IV from the bundle, re-derives the key, and decrypts. Wrong passwords fail closed - AES-GCM authentication detects tampering and returns an error instead of garbage.
Security Properties: PBKDF2 with 100,000 iterations makes brute-force attacks slow. Random salt and IV mean identical plaintexts produce different ciphertexts each time. AES-GCM provides authenticated encryption - any modification to the ciphertext is detected. The output contains everything needed to decrypt except the password.
No Server, No Storage: Keys and plaintext never leave your browser. Nothing is stored or transmitted. Lose the password and the bundle is unrecoverable by design - there is no recovery mechanism. This is true zero-knowledge encryption.
Browser-Based Privacy: All cryptographic operations use the Web Crypto API in your browser. No data is sent anywhere, making this safe for encrypting sensitive information. The tool is completely free with no signup required ever.
Where it is used
A developer in Austin encrypts API keys before committing them to a $400,000 repository. A Chicago consultant shares encrypted notes with a client team. A Miami journalist protects source communications using AES-256-GCM. A Denver startup founder encrypts a database backup passphrase before storing it in a password manager. A Seattle security researcher demonstrates PBKDF2 key derivation in a training session. A New York lawyer encrypts confidential case notes before sharing via email.
How to use the Encrypt Text
- Mode — enter the value.
- Password — enter the value (e.g. correct horse battery staple).
- Plaintext (encrypt) or salt.iv.cipher bundle (decrypt) — enter the value (e.g. Secret launch codes).
- Calculate — press the Calculate button to see the result instantly above.
Formula
PBKDF2-SHA256 (100k) -> AES-256-GCM. Bundle: base64(salt).base64(iv).base64(cipher).
Examples
Encrypt
Decrypt wrong
Encrypt again
Frequently Asked Questions
- Can you recover my password or data?
- No - and neither can we. There is no server and nothing is stored. Lose the password and the bundle is unrecoverable by design.
- Is 100,000 PBKDF2 iterations enough?
- It is OWASP's baseline for PBKDF2-HMAC-SHA256. Pair it with a long passphrase; iteration counts cannot save weak passwords.
- Is this tool free to use?
- Yes, this password encryption utility is completely free. Encrypt and decrypt unlimited text instantly offline with no signup required ever.
- Why do repeated encryptions differ?
- Fresh random salt and IV each time. Same password + same message still yields different bundles - a security feature, not a bug.
- What happens with the wrong password?
- AES-GCM authentication detects the mismatch and returns "Decryption failed" instead of garbled output. Tampering is always detected.
- Does it work offline?
- Yes. All cryptographic operations use the Web Crypto API in your browser with no network requests. Use it offline or on air-gapped machines.