Text encryptor
Encrypt or decrypt text with a passphrase (PBKDF2 + AES-GCM). Not steganography.
Runs in this tab. The file stays here.
Ciphertext blob
This runs in your browser. Nothing is uploaded.
About Text encryptor
Encrypt or decrypt text with PBKDF2 and AES-GCM in the browser — passphrase-based, no account.
Sometimes you need to park a snippet behind a passphrase before it sits in email or chat. This page derives a key with PBKDF2 and encrypts with AES-GCM, packing salt, IV, and ciphertext into a base64 blob you can copy. Decrypt reverses the process with the same passphrase.
Lose the passphrase and the blob is gone — there is no account recovery, because there is no account. This is not steganography (hiding in plain sight) and not the XOR toy in the text-stego tool. It is real authenticated encryption in Web Crypto, still only as strong as your passphrase and where you store the blob.
PII redactor hides patterns in plaintext. Hash generator one-ways a string. Encryptor is for reversible secrecy under a password you both share.
How to use Text encryptor
- 1Enter a strong passphrase and the plaintext (or the base64 blob).
- 2Choose encrypt or decrypt.
- 3Copy the ciphertext blob or recovered plaintext.
What it won't do
- Passphrase strength is on you.
- No key management, sharing UI, or cloud backup.
Common questions
Can you recover a lost passphrase?
No. There is no reset email and no backdoor. If the passphrase is gone, so is the plaintext.
Is this the same as the steganography tool?
No. Stego hides data in Unicode or images. This encrypts openly with AES-GCM and a passphrase.
Does the passphrase leave my device?
Not to our servers — crypto runs in the browser. Anyone who gets the blob still needs the passphrase; protect both.
Related tools
Why this one doesn't upload your file
There is no server to upload to. This page is a static file, and the work happens in your browser using the same graphics and WebAssembly code that renders every other site you visit. Your file is read from disk into memory, processed, and handed back as a download. Once the page has loaded you can disconnect from the network entirely and it keeps working. The longer explanation