AES-256 Text Encryptor & Decryptor
Encrypt text with AES-256-GCM and a passphrase, then decrypt it again. Runs in your browser with the Web Crypto API, so the text and password are never uploaded.
Tool Configuration Options
What is a AES-256 Text Encryptor & Decryptor?
This tool encrypts a message with AES-256 in GCM mode. Your passphrase is stretched into a 256-bit key with PBKDF2-SHA256 (250,000 rounds and a random salt), and a random 12-byte IV is used for every message. The output is one Base64 string that holds the salt, IV and ciphertext, so the same passphrase is all you need to decrypt it. GCM also authenticates the data: if the ciphertext is changed or the passphrase is wrong, decryption fails instead of returning garbage.
Execution Privacy:Toolbrix processes this utility using🔒 Processed locally — AES-256-GCM runs in your browser with the Web Crypto API; the text and passphrase never leave your device.
How to use this AES-256 Text Encryptor & Decryptor
Type a passphrase. Use a long one: anyone with the ciphertext can try to guess it.
Keep the mode on Encrypt and type or paste your message. The ciphertext appears on the right.
Copy the ciphertext and send or store it.
To read it again, switch the mode to Decrypt, paste the ciphertext and enter the same passphrase.
Frequently Asked Questions
Q:Why is the ciphertext different every time?
Each encryption uses a new random salt and IV. This is intended: the same message never produces the same output, which hides repeated messages.
Q:Can you recover my text if I forget the passphrase?
No. The passphrase is never sent anywhere and there is no backdoor. Without it the text cannot be decrypted.
Q:Can other tools decrypt this output?
Yes, with standard libraries: Base64-decode, take bytes 0–15 as the PBKDF2 salt, 16–27 as the AES-GCM IV and the rest as ciphertext plus tag, and derive the key with PBKDF2-SHA256, 250,000 iterations.
Q:Is this safe for passwords or secrets at work?
The cryptography is standard and strong, but the security depends on your passphrase. For team secrets, a password manager or a secrets vault is a better fit.
Related Tools
Explore similar micro-utilities and developer tools on Toolbrix.
Bcrypt Hash Generator & Verifier
Generate bcrypt password hashes and verify raw string matches against existing hashes.
Cryptographic Password Generator
Generate high-entropy, customizable passwords using Web Crypto API random values.
Base64 Encoder & Decoder
Encode plain text or UTF-8 strings into Base64 format or decode Base64 back to text.