How It Works: Bank-Grade Security
This tool leverages the native Web Crypto API built into your modern browser. Encryption happens locally on your device, meaning your passwords and data are never sent over the internet.
-
1
AES-GCM Algorithm: We use the Advanced Encryption Standard (AES) in Galois/Counter Mode (GCM), a widely respected standard used in HTTPS.
-
2
PBKDF2 Key Derivation: Data is not encrypted with your raw password. We derive a strong 256-bit key using PBKDF2 with a random "Salt" to prevent brute-force attacks.
-
3
Random IV: Every encryption generates a unique Initialization Vector (IV). Even with the same password and text, the output is different every time.
Common Use Cases
π Secure Notes
Encrypt private journals, account lists, or memos before saving them to cloud services like Evernote or Notion.
π¬ Safe Messaging
Send confidential info via email or chat. Only the recipient with the password can decrypt and read it.
π Archiving
Encrypt backups containing sensitive data before storing them on external drives or USB sticks.
FAQ
If I forget my password, can you recover it? βΌ
No. AES encryption is irreversible. Without the correct password, no one
(including us) can decrypt your data. Please memorize your password.
Is my data sent to your server? βΌ
Absolutely not. All encryption happens inside your browser. You can even
disconnect your internet and use this tool offline.
Why does the result change every time? βΌ
This is a security feature. We generate a random "Salt" and "IV" for every session. This
prevents attackers from analyzing patterns. As long as the password is correct, you can decrypt
any of the outputs back to the original text.
How much text can I encrypt? βΌ
There is no hard limit, but browser performance might drop with very large texts. We recommend
keeping it under 5MB per operation.
What is "Salt"? βΌ
Salt is random data mixed with your password to create the encryption key. It defends against
"Rainbow Table" attacks (pre-computed password hacks).
Can I decrypt this with other software? βΌ
Technically yes, if it supports standard AES-GCM/PBKDF2 and can parse our JSON format (IV + Salt
+ Ciphertext). However, it's easiest to use this tool.
Does it support non-English characters? βΌ
Yes. We use UTF-8 encoding, so it fully supports Chinese, Emojis, and special symbols.
Why does decryption fail? βΌ
Usually due to: 1. Wrong password; 2. Copied ciphertext is incomplete. AES-GCM includes
integrity checks, so any modification to the text will cause decryption to fail.