AES encrypt and decrypt tool. Encrypt text with AES-256-GCM using a password-derived key. Decrypt ciphertext back to plain text.
100% browser-based — your data never leaves your device
Encrypt and decrypt text using AES-256-GCM with a password-based key.
Type or paste the text you want to encrypt, or paste ciphertext to decrypt.
Enter a strong password used to derive the encryption key via PBKDF2.
Click Encrypt to secure your text or Decrypt to recover the original plaintext.
Ctrl+Enter to encrypt
Decode and inspect JWT tokens instantly.
Password GeneratorGenerate strong, secure random passwords with customizable options.
Passphrase GeneratorGenerate memorable, secure passphrases from word lists.
UUID GeneratorGenerate UUID v4 identifiers instantly.
UUID ValidatorValidate UUID strings and identify the version (v1, v2, v3, v4, v5).
Hash GeneratorGenerate SHA-1, SHA-256, SHA-384, and SHA-512 hashes from text.
JWT GeneratorGenerate signed JWT tokens for testing with custom headers and payloads.
Bcrypt Hash GeneratorGenerate bcrypt password hashes with configurable salt rounds.
API Key GeneratorGenerate cryptographically secure API keys in hex, base64, alphanumeric, and UUID formats.
HMAC GeneratorGenerate HMAC hashes with SHA-256, SHA-384, and SHA-512 algorithms.
AES EncryptEncrypt and decrypt text using AES-256-GCM with a password-based key.
AES Encrypt is a free online security tool that encrypt and decrypt text using aes-256-gcm with a password-based key. It works entirely in your browser — no downloads, no installations, and no server uploads required. security engineers, backend developers, system administrators use AES Encrypt when they need a fast, privacy-respecting way to process security data without installing additional software. It supports capabilities such as aes-256-gcm, password-based key, authenticated encryption. Additional features include local only. Common use cases include encrypting sensitive configuration data and environment variables for secure storage, protecting personal or confidential text data before transmission over untrusted networks, securing backup data and api credentials with password-based encryption. All processing happens locally using modern browser APIs, which means your data never leaves your device. This makes AES Encrypt ideal for working with sensitive data, proprietary code, or any situation where privacy matters.
AES Encrypt & Decrypt is a free online security tool that helps you encrypt and decrypt text using aes-256-gcm with a password-based key. Key capabilities include aes-256-gcm, password-based key, authenticated encryption. All processing is done locally in your browser — no data is uploaded, stored, or shared with any server. There are no sign-ups, no file size limits, and no hidden charges. It is commonly used to encrypting sensitive configuration data and environment variables for secure storage.
Type or paste the text you want to encrypt, or paste ciphertext to decrypt.
Enter a strong password used to derive the encryption key via PBKDF2.
Click Encrypt to secure your text or Decrypt to recover the original plaintext.
| Category | Details |
|---|---|
| Input Limits | Maximum input size: Browser memory bound |
| Key sizes: 128–4096 bits (algorithm dependent) | |
| Supported Formats | Raw text, Hex, Base64, Binary, JWT / JWS / JWE |
| Browser Engine |
|
All operations run entirely in your browser using built-in Security APIs. No server uploads, no data storage, and no third-party requests.
AES Encrypt is ideal when you need to encrypting sensitive configuration data and environment variables for secure storage without installing software or uploading data to a server. Since everything runs in your browser, there is no setup time and no risk of your data being stored on external servers. For for command-line cryptographic operations, consider using OpenSSL CLI. For for enterprise secret management, HashiCorp Vault may be a better fit. AES Encrypt fills the gap between heavyweight desktop tools and insecure online services that require uploading your data.
AES-256-GCM (Advanced Encryption Standard with 256-bit key in Galois/Counter mode).
Your password is combined with a random salt using PBKDF2 with 600,000 iterations.
No. All encryption and decryption happens entirely in your browser using the Web Crypto API.
Industry-standard authenticated encryption with 256-bit keys in Galois/Counter mode.
Your password is converted to a 256-bit key using PBKDF2 with a random salt.
GCM mode provides both confidentiality and integrity verification.
All encryption happens in your browser using the Web Crypto API — nothing is sent to any server.
AES Encrypt & Decrypt is useful in a variety of scenarios across different workflows:
Encrypting sensitive configuration data and environment variables for secure storage
Protecting personal or confidential text data before transmission over untrusted networks
Securing backup data and API credentials with password-based encryption
AES-256-GCM is only as secure as your password. Use a long, random password or passphrase. This tool uses PBKDF2 with 600,000 iterations.
The initialization vector (IV) is required for decryption but does not need to be secret. Store it alongside the encrypted data.
Explore more tools in the Security workspace:
JWT Decoder
Decode and inspect JWT tokens instantly.
Password Generator
Generate strong, secure random passwords with customizable options.
Passphrase Generator
Generate memorable, secure passphrases from word lists.
UUID Generator
Generate UUID v4 identifiers instantly.
UUID Validator
Validate UUID strings and identify the version (v1, v2, v3, v4, v5).
Hash Generator
Generate SHA-1, SHA-256, SHA-384, and SHA-512 hashes from text.