About Text Encrypt / Decrypt

Text Encrypt / Decrypt protects a short piece of text with a passphrase. It derives an AES-256-GCM key from the passphrase with PBKDF2-SHA-256 at 250,000 rounds, then encrypts in the page.

The result is a base64 package holding the salt, nonce, and ciphertext. Paste it back with the same passphrase to recover the text. Nothing is uploaded.

How to use it

  1. Type or paste your text and choose Encrypt.
  2. Enter a passphrase and run it.
  3. Copy the package. To read it later, switch to Decrypt, paste the package, and enter the same passphrase.

Common questions

What happens if I lose the passphrase?

The text cannot be recovered. There is no reset. The passphrase is never stored or sent anywhere.

How strong is it?

AES-256-GCM with a PBKDF2-SHA-256 key derivation at 250,000 iterations and a random 16-byte salt and 12-byte nonce per message. That is a standard modern setup, but the weak link is a guessable passphrase.

Can someone tell if the package was tampered with?

Yes. GCM is authenticated, so any change to the package makes decryption fail rather than return altered text.

Does anything leave my browser?

No. The encryption and decryption run locally with the Web Crypto API.