AES Encrypt Decrypt
Ciphertext
Encrypt or decrypt to see the result here. AES-GCM 256 only — RC4 is not offered.
AES encrypt and decrypt in the browser
AES-GCM 256 with a passphrase (PBKDF2-SHA-256, 100,000 iterations) or a raw 32-byte hex key. Output is a portable ts1. string or a JSON package. RSA-OAEP key pairs are a second mode. Nothing is uploaded. Running in your browser is not the same as safe against a compromised device.
AES vs hashing
Hashing (MD5, SHA-256, bcrypt) is one-way. Encryption is reversible with the key. For digests use the hash generator. For PDF passwords see protect PDF.
AES encrypt FAQ
- What is AES-GCM encrypt and decrypt?
- AES-GCM is authenticated encryption: ciphertext that also fails if it was altered. This page uses AES-256-GCM in your browser. It is encryption, not hashing — a hash cannot be reversed to the original message.
- Where is my passphrase stored?
- It is not. Toolshelf never writes the passphrase, hex key, or RSA private key to localStorage, the URL, or a server. Optional plaintext and ciphertext drafts stay in this tab’s session storage only.
- What happens if I forget the passphrase?
- Nobody can recover it. There is no account reset. Reuse of the same passphrase on other sites is your risk. A compromised device can still read what you type here.
- Why is there no RC4?
- RC4 is a broken stream cipher. This tool only offers AES-GCM 256. “Military grade” claims are marketing, not a guarantee against a stolen laptop.
- RSA 2048 vs 4096?
- Both generate RSA-OAEP keys with SHA-256. 2048-bit is the usual default; 4096-bit is slower to generate and makes larger PEM files. This is key generation only — not a PGP or age client, and not for encrypting large files with RSA directly.
- Can I encrypt a PDF here?
- Use the PDF protect tool for PDF passwords. This page encrypts text with AES-GCM or mints RSA PEM. Files over the text limit are rejected with a message.
Related tools
Continue with related browser-based tools on Toolshelf.
- Password Generator & Strength Checker — Generate strong random passwords and check password strength instantly.
- Base64 Encoder & Decoder — Online Base64 encoder and decoder.
- Hash Generator — Online hash generator.
- JWT Decoder & Inspector — Online JWT decoder and inspector.
- Image to Base64 Converter — Image to Base64 converter.
- URL Encoder & Decoder — Online URL encoder and decoder.
- HTML Encoder & Decoder — HTML encoder online.
Examples
AES-GCM round-trip
Encrypt UTF-8 with a passphrase (PBKDF2 100,000 iterations). Decrypt the ts1. string with the same passphrase.
Limitations
- AES-GCM 256 only. RC4 is not offered.
- Text is capped at 200,000 characters.
- Passphrases and private keys are not stored.
- RSA mode generates PEM; it is not a PGP client.
What would you like to do next?
Continue working with the next step in this workflow. Recently used tools in this set are listed first.
- Password Generator & Strength Checker — Generate strong random passwords and check password strength instantly.
- Base64 Encoder & Decoder — Online Base64 encoder and decoder.
- Hash Generator — Online hash generator.
- JWT Decoder & Inspector — Online JWT decoder and inspector.
You may also need
Continue with related browser-based tools on Toolshelf.
- Password Generator & Strength Checker — Generate strong random passwords and check password strength instantly.
- Base64 Encoder & Decoder — Online Base64 encoder and decoder.
- Hash Generator — Online hash generator.
- JWT Decoder & Inspector — Online JWT decoder and inspector.
- Image to Base64 Converter — Image to Base64 converter.
- URL Encoder & Decoder — Online URL encoder and decoder.
- HTML Encoder & Decoder — HTML encoder online.