Handitab

Text Encryption

Encrypt text with a password using AES-256-GCM and a PBKDF2-derived key, or decrypt it again, with all processing done in your browser.

About Text Encryption

AES-256-GCM is an authenticated symmetric cipher: it encrypts data and detects any change to the ciphertext. This tool derives a 256-bit key from your password with PBKDF2 (SHA-256, 200,000 iterations, random 16-byte salt), encrypts with a random 12-byte nonce through the Web Crypto API, and outputs salt, nonce, and ciphertext together as Base64. Everything runs in your browser. The output format is specific to this tool, and a lost password cannot be recovered.

How to use Text Encryption

  1. Type or paste into the "Plain text, or encrypted text when decrypting" box, or press "Use example" to try it with sample data.
  2. Set "Direction" and "Password" if the defaults do not fit.
  3. The result appears below and updates as you type.
  4. Copy the result with the copy button, or download it as a file where that is offered.

Questions about Text Encryption

Can I decrypt the output with another tool such as OpenSSL?

Not directly. The output is Base64 of a 16-byte salt, a 12-byte nonce, then the ciphertext with its GCM tag. Another program can decrypt it only if it applies the same PBKDF2 settings and byte layout.

What happens if I forget the password?

The text cannot be recovered. The key exists only as a derivation of your password, nothing is stored, and there is no reset. Security also depends on the password: short or common ones can be guessed.

Runs in your browser. Page last updated .

More security tools

All 10 security tools
TOTP / 2FA GeneratorGenerate 6-digit TOTP codes from a Base32 secret, the way an authenticator app does, with the secret kept inside your browser.API Key / Token GeneratorGenerate random strings for API keys, tokens, and secrets, 1 to 512 characters long, in alphanumeric, hex, or URL-safe Base64 characters.Cipher ToolsEncode or decode text with the classical Caesar, ROT13, Atbash, and Vigenère ciphers, for learning and puzzles rather than for security.Hash GeneratorCalculate the MD5, SHA-1, SHA-224, SHA-256, SHA-384, and SHA-512 hashes of any text at once, as one-way digests that cannot be reversed.JWT DecoderDecode a JSON Web Token to read its header, payload, and expiry time, or create an HS256-signed token from a JSON payload and secret.JWT EncoderCreate a signed JSON Web Token from a JSON payload and a secret, using the HS256 algorithm (HMAC with SHA-256) in your browser.