Encrypt / decrypt text
Lock a message with a password and get text you can paste anywhere. Done on your device.
How to use it
- Type or paste your message. To decrypt, paste the whole encrypted block instead.
- Type the password, twice when encrypting, and press the button.
- Copy the result. Send the password to the other person by a different route than the message.
Questions
How secure is it?
It uses AES-256-GCM, key from your password by PBKDF2-HMAC-SHA-256 with 600,000 rounds. The strength depends mostly on your password: a short or common one can be guessed whatever the method. Use a long passphrase or a password from the generator.
Can you recover my password?
No. Nothing is sent to us, and the password is not stored anywhere. If you lose it, the message cannot be opened by anyone.
Can I decrypt it without this site?
Yes. The format is simple and open: the text is Base64 between two marker lines. The first 37 bytes are a header (the letters TWE1, the number of rounds, a 16-byte salt and a 12-byte nonce). The rest is AES-256-GCM, with the header as authenticated data. Any program that can do PBKDF2 and AES-GCM can read it.
Why does it take a moment?
Turning a password into a key is made slow on purpose, so that someone guessing passwords has to repeat that work for every guess. It takes about a second on a typical device.
What if the decrypted result looks like gibberish?
The password was right but the content was not text. If it came from the file tool, decrypt it there instead.
Is my text sent to a server?
No. Everything happens in your browser. Your text is not uploaded or stored.
Is it free?
Yes, you can use it for free. A subscription removes limits and unlocks premium tools.