Encrypt text

Encrypt and decrypt text with a passphrase using AES-GCM, in your browser.

Mode

PBKDF2 iterations

Armoured block

Text

Encrypted as UTF-8. Never saved.

Passphrase

Never saved. Use a long passphrase: it is the only protection.

Encrypted

Self-describing: the version, iteration count, salt and IV travel with it.

Message format

v1.<iterations>.<salt>.<iv>.<ciphertext>, each binary part in Base64url without padding.

Key: PBKDF2 with SHA-256 over the UTF-8 passphrase and a random 16-byte salt.
Cipher: AES-256-GCM with a random 12-byte IV. The ciphertext ends with the 16-byte authentication tag, and v1.<iterations> is bound as additional data, so any change is detected.
Armour: The same string wrapped at 64 characters between BEGIN ENCRYPTED TEXT and END ENCRYPTED TEXT lines.