Text Encrypt & Decrypt
Encrypts a message with AES-GCM from a passphrase and produces a self-contained Base64 blob.
Encrypts a message with a passphrase into a single Base64 string you can paste anywhere, and decrypts it back. AES-GCM with a PBKDF2-derived key; the salt and nonce ride inside the output, so the string is the whole ciphertext and there is nothing else to keep.
There is no recovery. A forgotten passphrase is the message gone; a weak one is the message public.
Message
Encrypted (paste-anywhere Base64)
How to use it
Choose a passphrase you will not lose
There is no recovery of any kind. A forgotten passphrase is the message gone, and a guessable one is the message public.
Encrypt and copy the Base64
It survives email, chat and a text file — no attachment, no key file, nothing to store beside it.
Send the passphrase by another route
The whole point is lost if the passphrase travels next to the ciphertext. Different channel, ideally a different day.
Common questions
Why PBKDF2 rather than Argon2id?
Because PBKDF2 is what the browser itself implements, in code the platform maintains. Argon2 would mean shipping a WebAssembly build, and a crypto primitive you cannot audit is worse than a well-understood one at the OWASP-recommended iteration count, which is what is used here.
Would a wrong passphrase give me garbled text?
No — it fails outright. AES-GCM authenticates the ciphertext, so a wrong passphrase or a single altered character produces an error rather than plausible-looking nonsense. Tampering is detected, not decrypted.
Is this end-to-end encryption?
It is encryption you do yourself, in your browser, with a key nobody else has. What it is not is a messaging protocol — there is no forward secrecy, no identity, no key exchange. For an ongoing conversation, use a tool built for that.
Can the file encryptor open this?
Yes — deliberately the same container, so the two tools decrypt each other’s output. One construction to audit rather than two.
Feed it from
File Encrypt & Decrypt
Encrypts any file with AES-256-GCM from a passphrase, and decrypts files it produced.
Self-Destructing Note
Encrypts a note in the browser and gives you a one-time link that destroys the note after it is read.
PGP Message Tool
Encrypts and decrypts OpenPGP messages with a passphrase, entirely in the browser — RFC 4880 symmetric mode (AES-256, SHA-256 S2K, MDC), interoperable with gpg -c. Public-key encryption and signatures are not built.
Classic Cipher Tool
Encodes and decodes Caesar, ROT13, Atbash, Vigenère and rail-fence ciphers, with a brute-force view.
Next
These accept what this tool produces, so the result can go straight in.
Base64 Encoder & Decoder
Encodes and decodes Base64 and Base64URL for text or files, handling UTF-8 correctly.
File Encrypt & Decrypt
Encrypts any file with AES-256-GCM from a passphrase, and decrypts files it produced.
Random Key Generator
Generates cryptographic random bytes as hex, Base64 or Base64URL at a chosen length, for app secrets.
Self-Destructing Note
Encrypts a note in the browser and gives you a one-time link that destroys the note after it is read.
curl to Code
Converts a curl command into fetch, axios, Python requests, Go, PHP or PowerShell.
Text Hash
Computes MD5, SHA-1, SHA-256, SHA-384, SHA-512 and CRC-32 of a string, with an uppercase and Base64 output option.