AES Encrypt & Decrypt Tool
Free online AES encrypt/decrypt tool. Securely encrypt or decrypt text with AES-128, AES-192, or AES-256 in GCM mode using a password. PBKDF2 key derivation. 100% client-side, no data sent to servers.
Loading tool...
What is AES Encrypt & Decrypt Tool?
The AES Encrypt & Decrypt tool uses the Web Crypto API to perform authenticated AES-GCM encryption directly in your browser. You supply a password; the tool derives a strong AES key from it using PBKDF2 (150,000 iterations, SHA-256) with a fresh random salt every time, then encrypts your text with AES-128, AES-192, or AES-256. The output is a single base64 string that bundles the salt, IV, ciphertext, and authentication tag — portable and safe to paste anywhere. Nothing ever leaves your device.
Key Benefits
- Industry-standard AES-GCM authenticated encryption (NIST-approved)
- Password-based key derivation via PBKDF2 protects against brute-force attacks
- Fresh random salt and IV for every encryption — identical plaintexts never produce the same ciphertext
- AES-128, AES-192, and AES-256 selectable to match your security requirements
- 100% client-side via the Web Crypto API — no network calls, no server storage
Common Use Cases
- •Encrypting sensitive notes or secrets before pasting them into chat or email
- •Developers testing AES-GCM round-trips against their own backends
- •Sharing credentials or tokens through insecure channels with a shared password
- •Students learning how symmetric authenticated encryption works in practice
- •Anyone who needs trustworthy encryption without installing software
How to Use the AES Encrypt & Decrypt Tool
- Pick a Mode: Choose Encrypt to turn text into a base64 ciphertext, or Decrypt to convert a base64 ciphertext back into readable text. Both operations use the same password.
- Choose a Key Length: Select AES-128, AES-192, or AES-256. AES-256 provides the strongest security and is recommended for sensitive data. Both sides must use the same key length.
- Enter Your Password: Type a strong password. The tool derives an AES key from it using PBKDF2 with 150,000 iterations and a random salt, so even a modest password resists brute-force attacks.
- Encrypt or Decrypt: Click the button to run the operation. Copy the result or use Swap to move it into the other mode for a quick round-trip verification.
Key Features
- AES-GCM authenticated encryption (AES-128, AES-192, or AES-256)
- Password-based key derivation via PBKDF2 (150,000 iterations, SHA-256)
- Random salt and IV generated for every encryption — never reused
- Base64 output bundles salt, IV, and ciphertext into one portable string
- Swap button flips encrypted output back into decrypt input instantly
- Runs entirely in your browser via the Web Crypto API — no network calls