Text Encryptor
Encrypt and decrypt text with a key
About Text Encryptor
Text Encryptor turns a message into Base64 ciphertext that only someone with the password can read, and turns it back. It uses AES-256-GCM through your browser's Web Crypto API, with a key derived from the password by PBKDF2-SHA-256 over 600,000 iterations and a new random salt and IV for each message, so the same text never encrypts the same way twice. Use it for notes or messages sent through a channel you do not fully trust, with the password shared another way. It encrypts text only; File Encryptor handles files.
Example
Encrypted with the password blue-harbor-42. Your own result will differ, but this one decrypts back to the message with that password.
Text (Secret key: blue-harbor-42)
Meet at 6
Result after "Encrypt"
T0NUMa1WBvLr2YnFybvyCCO1NYbVK+A6yHrUtZy1FHedD2vbLXuiD+a6YGuKU6QOoP+BnTHvrSVS
How to encrypt and decrypt text with a password
- 1Paste the message to encrypt, or the Base64 text to decrypt, into the box.
- 2Type a long passphrase in "Secret key"; the field hides what you type.
- 3Click "Encrypt" or "Decrypt"; both stay inactive until the box and the key are filled.
- 4Click "Copy", or "Download" to save the result as encrypted.txt, a name kept even after decrypting.
Formats and limits
- Algorithm
- PBKDF2-SHA-256 turns the password into a key over 600,000 iterations, then AES-256-GCM encrypts the message
- Per message
- A random 16-byte salt and a random 12-byte IV
- Encrypted text
- Base64 of the marker OCT1, the salt, the IV, the ciphertext, and its tag, so it always starts with T0NU
- Old format
- Texts encrypted with the XOR method used before September 29, 2026, still decrypt, with a warning
Where your text is processed
Your browser's Web Crypto API does both the encrypting and the decrypting on this page. The message, the password, and the result are never sent to us, so no copy exists that could be recovered. Error messages shown here, such as a wrong-password warning, are reported to our error log with the tool name and your browser name and version, without your text or password.
Frequently asked questions
Is the encryption safe with a short password?
No. AES-256-GCM is not the weak point: a short or common password can still be guessed by trying many candidates, and the 600,000 PBKDF2 iterations only slow each guess down. Use a long passphrase that you do not use anywhere else.
Will a wrong password give me garbled text?
No, for texts encrypted since September 29, 2026: AES-GCM checks integrity, so a wrong password or a changed text is refused with an error. Base64 in the old XOR format, or any Base64 not made by this tool, cannot be checked, so a wrong password there may show unreadable text with the old-format warning.
Can you recover my text if I forget the password?
No. We never receive the password or the text. The encrypted text holds everything needed to decrypt it except the password, so without it nobody can read the message.
Is it normal that the same text encrypts differently each time?
Yes. A new random salt and IV are drawn for every message, so two results never match, which also hides that two messages are identical. Any of those results decrypts with the same password.
Tips and tricks
- ✓Send the password through a different channel than the encrypted text, for example by phone.