Encrypt and decrypt text using AES-256, RSA, or other ciphers with password-based key derivation.
Type the message you want to encrypt or decrypt.
Enter a secret key to use for the encryption.
Click encrypt to protect or decrypt to reveal the message.
Click copy to grab the encrypted or decrypted output.
Encryption turns readable text into an unreadable string of characters; decryption reverses it for anyone holding the same password, or the matching private key in RSA mode. The password never becomes the key directly: a password-based key-derivation function stretches it into the AES-256 key, and the salt and initialization vector needed to decrypt travel inside the output, so you can paste the ciphertext anywhere and recover the text later with the password alone. Everything runs in the browser - nothing is uploaded. The usual surprise: encrypting the same text twice never yields the same ciphertext, so outputs cannot be compared to check a password.
The password is stretched into the AES-256 key by a password-based key-derivation function, which mixes the password with a random salt and repeats hashing so that guessing attempts stay expensive. The salt is stored alongside the ciphertext so the identical derivation can be repeated at decryption time. Because the salt is chosen fresh for every run, the same password and plaintext never produce the same ciphertext twice.
Decryption with the wrong password fails in one of two ways, depending on the cipher mode. If the mode authenticates the ciphertext with an integrity tag, the tool reports an error and returns nothing. Without that check, it silently returns garbage that may still look like plausible text. Either way, nothing about the real password is revealed - a wrong guess behaves exactly like a wrong key, which is the point.
No. The encryption key is derived from the password at the moment of use and is never stored anywhere, so there is nothing to recover or reset. Treat the password as the only copy of your data: keep it in a password manager, or keep a plaintext copy of anything you cannot afford to lose.
Not if you want secrecy. An attacker who can read that one channel gets both pieces, and the encryption accomplishes nothing. The scheme assumes the two travel separately - ciphertext on one channel, password on another, such as a phone call or a message sent in person. If only one channel is compromised, the secret survives.
The behavioral notes were checked against the browser implementation. Standards and primary references below define the relevant format, formula, or platform behavior.
Generate strong, random passwords with customizable length, character sets, and complexity requirements.
Analyze password strength with entropy scoring, crack-time estimates, and improvement suggestions.
Create cryptographically random strings for API keys, tokens, salts, and unique identifiers.
Create QR codes for URLs, text, Wi-Fi credentials, vCards, and more with customizable size and colors.
Scan and decode QR codes from uploaded images or your device camera to extract embedded data.
Compute MD5, SHA-1, SHA-256, and SHA-512 checksums to verify file integrity and detect tampering.