Text Tools

Text Encrypt / Decrypt – Secure AES-256 Encryption (Client-Side)

Lock text with a password and unlock it again, right in your browser.

Encrypt text online with AES-256 and a password, then decrypt it whenever you need it. Your text and password never leave your device.

Text and password stay on your device

0 characters

There is no way to recover text if the password is lost. Nothing is sent or saved.

What is text encryption?

Encryption scrambles readable text into a block of characters that means nothing without the right password. Anyone who sees the encrypted text, in an email, a note or a file, cannot read it. Only someone with the password can turn it back into the original. This tool does both steps: it encrypts your text, and it decrypts text it has encrypted.

How AES-256 Encryption Works

AES is the Advanced Encryption Standard, one of the most widely used encryption methods in the world. The 256 refers to the key length in bits, which makes guessing the key impractical. This tool uses AES-256 in GCM mode, which does two jobs at once: it encrypts the text, and it adds a check value so that any change to the encrypted text, or a wrong password, is detected instead of producing garbled output.

Password-Based Key Derivation

A password isn't a good encryption key on its own, so the tool turns it into one with PBKDF2, using SHA-256 and 600,000 rounds. This makes each password guess slow for an attacker. A random salt is mixed in for every encryption, so the same password never produces the same key twice. A random IV makes every result different, even for identical text. Both are stored inside the encrypted text, so all you need to decrypt is the password.

Your Text Stays on Your Device

Everything on this page runs in your browser, using the Web Crypto features built into it. Your text and password are never uploaded, logged or stored, so nobody else, including us, can read what you encrypt. It's also fast, because there's no waiting on a server, and it keeps working even if your connection drops after the page has loaded.

Common Uses

Secure notes

Keep private notes, recovery phrases or reminders in a note app or file, with the content unreadable without your password.

Sensitive text

Protect passages, addresses or account details before you store them in a place you don't fully control.

Tokens and keys

Store an API token or configuration value in encrypted form, and decrypt it only when you need it.

Private messages

Send encrypted text through any email or chat app. Share the password separately, by another route.

Works on Mobile and Desktop

The tool works in any modern browser on phones, tablets and computers, with nothing to install. On a large screen your text and the result sit side by side. On a phone they stack, and every button is sized for touch. Encrypted text works across devices, so you can encrypt on one and decrypt on another.

Frequently Asked Questions

How do I encrypt text online with a password?
Paste or type your text, enter a password and press Encrypt Text. The result is a block of letters and numbers you can copy or download. To read it again, paste it back in, enter the same password and press Decrypt Text.
Is AES-256 encryption secure?
AES-256 is a widely used standard, trusted by governments and banks. This tool uses it in GCM mode, which also detects any change to the encrypted text. In practice, the strength of the result depends mostly on your password, so use a long one.
Can I recover my text if I forget the password?
No. The password is not stored anywhere and there is no reset. If it is lost, the encrypted text cannot be decrypted, so keep it somewhere safe.
Why does decryption fail?
Usually the password is wrong. It can also fail if the encrypted text was changed, cut short or had characters added when it was copied. Paste the full text exactly as it was produced. Capital letters and spaces in the password count.
Why is the encrypted text different each time?
Each encryption uses a new random salt and a new random IV, so the same text and password give a different result every time. All of them decrypt to the same original text.
Is my text or password sent anywhere?
No. Encryption and decryption run in your browser using the built-in Web Crypto features. Your text and password are never uploaded, logged or stored, and they are gone when you close or clear the page.
Can I decrypt the text in another app?
The output is standard AES-256-GCM with a PBKDF2 key. It is Base64 of a version byte, a 16-byte salt, a 12-byte IV and the ciphertext. Other tools won't read it automatically, but a developer can decrypt it with any standard crypto library.