Text Encryptor

Key features

• Real AES-256-GCM encryption through the browser's Web Crypto API — no JavaScript crypto toy reimplementation.
• Your password is stretched with PBKDF2-SHA256 at 150,000 iterations plus a fresh random 16-byte salt.
• Each encryption uses a new random 12-byte IV, so encrypting the same message twice yields different ciphertexts (as it should).
• Output is a self-contained blob — DWT1.<salt>.<iv>.<ciphertext> — carrying everything needed to decrypt except the password.
• Password fields hide input, show a length-based strength label, and errors distinguish a wrong password from corrupted data.
• Requires a secure context (HTTPS or localhost) because Web Crypto simply isn't available otherwise.

How it works

1. 1

   Enter your secret and password

   On the Encrypt tab, type the message and choose a strong password — 16+ characters is the honest recommendation shown in the UI.

2. 2

   Encrypt the message

   Press Encrypt message. The browser derives the key (PBKDF2, 150k rounds) and encrypts with AES-256-GCM using fresh random salt and IV.

3. 3

   Copy and store the blob

   Copy the DWT1.… blob and keep it anywhere — chat, notes, email. Without your password it's just noise.

4. 4

   Decrypt later

   On the Decrypt tab, paste the blob, re-enter the same password, and the original message reappears — or a clear error if the password or blob is wrong.

Tips for better results

• 💡There is no password recovery — losing the password means the data is gone for good. Store it in a password manager.
• 💡The strength label is a length heuristic (weak under 6, fair under 10, strong under 16, excellent at 16+); longer is always better.
• 💡The blob is self-describing but not version-flexible: only this tool's DWT1 format can decrypt it — OpenSSL or other tools won't recognize it.
• 💡Anyone with both the blob and your password can decrypt, so treat the password as the single root of security.

Frequently asked questions