Processed locally in your browser

AES-GCM Encrypt/Decrypt

Encrypt and decrypt text with password-derived AES-256-GCM keys.

Send feedback

Tell us what worked, what did not, or what could be better.

Sends this feedback, this page, and language to the ToolHub inbox. Tool input is never included.

Input

Output

About

Encrypt UTF-8 text with AES-256-GCM. A random salt and nonce are generated for every encryption and packaged with PBKDF2 settings in JSON.

Key Features

  • Authenticated encryption detects tampering
  • Random 96-bit nonce and 128-bit salt

How to use

  1. 1Enter text and a strong password, then encrypt.
  2. 2Keep the complete JSON payload; decrypt it later with the same password.

Example

Input

text="private note" · password="correct horse battery staple"

Output

{"v":1,"alg":"AES-256-GCM","kdf":"PBKDF2-SHA-256","iterations":250000,"salt":"…","iv":"…","ciphertext":"…"}

Limitations

  • Input is limited to 2,000,000 characters to keep the browser responsive.
  • Losing the password makes the ciphertext unrecoverable. This tool is not a password vault or file-encryption format.
  • All input is processed locally in your browser and is never uploaded to ToolHub.

Standards and references

Last reviewed:

Related Tools

HMAC Generator
Password Generator
Hash Generator
Base64 Converter