Encrypt text into an authenticated AES-256-GCM package or decrypt a compatible package using a passphrase, entirely in your browser.
Both key derivation and authenticated encryption run locally in a dedicated worker. No account, server key or recovery copy exists. Text and passphrases are not persisted.
Use a unique passphrase of at least 12 characters (maximum 1024 UTF-16 units). AES-256-GCM, random 16-byte salt and 12-byte IV, PBKDF2-HMAC-SHA-256 with 600,000 iterations. No recovery is possible without the exact passphrase. Keep the package and passphrase separately. Passphrase fields clear after success.
No. Processing uses local browser JavaScript and workers. Inputs are not stored, logged, placed in URLs or sent to external services. Clipboard or downloads occur only when you choose.
Input and result references are released and any active worker is terminated. JavaScript cannot guarantee physical memory erasure or remove screenshots, copied clipboard data or downloads. Clear those separately if needed.
No tool can guarantee security of a device, a password or a file. Strength is a local model estimate; file hashing verifies bytes against a supplied digest. Encryption protects compatible text under its stated format and passphrase assumptions.
