Portable payload
- Input
- plain text + password
- Result
- opskit:aes-gcm:1:…
The output contains the random salt, IV and authenticated ciphertext, but not the password.
AES Encrypt / Decrypt
Encrypt text with authenticated AES-GCM using a 128, 192 or 256-bit key. A random salt and IV are embedded in the output so it can be decrypted later.
A forgotten password cannot be recovered. This is not a password manager.
Runs entirely in your browser. This page is a static file. Whatever you type stays in the tab, is never sent to a server, and is gone when you close it — so pasting a real token or config is safe.
When you reach for this
- Protecting a small note before storing or sending it.
- Testing AES-GCM integrations.
- Creating temporary encrypted text without uploading plaintext.
Worked examples
Where people get this wrong
Reusing a weak password
Encryption cannot compensate for a short or reused password. Use a long unique passphrase.
Frequently asked questions
Which algorithm should I choose?
AES-256-GCM is the recommended default. All options use authenticated GCM and a key derived by PBKDF2-SHA-256 with 210,000 iterations.