Choose encrypt or decrypt
Switch modes depending on whether you're protecting new text or reading a previously encrypted message.
Encrypt or decrypt text with a passphrase, entirely in your browser. Nothing is uploaded โ the passphrase and plaintext never leave your device.
Switch modes depending on whether you're protecting new text or reading a previously encrypted message.
A unique random salt and IV are generated for every encryption, and your key is derived with PBKDF2.
Send the encrypted output through any channel โ it's unreadable without the same passphrase.
No. Encryption and decryption both happen locally using the browser's built-in Web Crypto API. Nothing is sent to a server.
AES-256 in GCM mode. The key is derived from your passphrase with PBKDF2 (SHA-256, 100,000 iterations) and a random salt, and a random IV is generated for every encryption.
The text cannot be recovered. There is no backdoor or password reset โ the passphrase is the only key, and it is never stored anywhere.