Text Encryptor

AES-256-GCM (Advanced Encryption Standard with Galois/Counter Mode) is the gold standard for symmetric encryption. It uses a 256-bit key to both encrypt and decrypt data, and the GCM mode provides authenticated encryption — meaning it detects if the ciphertext has been tampered with.

Your passphrase is converted into a 256-bit encryption key using PBKDF2 (Password-Based Key Derivation Function 2) with 100,000 iterations. This deliberate slowness makes brute-force attacks on weak passphrases much harder. A random salt ensures the same passphrase produces different keys each time.

The output contains three parts concatenated and Base64-encoded: the salt (16 bytes), the initialization vector (12 bytes), and the ciphertext. All three are needed for decryption. Everything runs in your browser using the Web Crypto API — the same cryptographic library used by banks and password managers. No data is ever sent to a server.