← All Tools
AES-GCM Encrypt & Decrypt
Encrypt and decrypt text with AES-256-GCM using the Web Crypto API.
⚠ Demo Only: This tool is for learning and quick snippet encryption. Do not rely on it for production secrets management. Use dedicated tools like GPG, age, or a vault for sensitive data.
All cryptographic operations happen locally in your browser using the Web Crypto API. No data, keys, or ciphertexts are ever sent to any server.
600,000 is the current OWASP minimum for PBKDF2-HMAC-SHA256 (OWASP Password Storage Cheat Sheet). The count is stored in the output, so decryption reads it automatically; only legacy ciphertext without a header needs the matching count picked by hand on decrypt.
How It Works
Encryption
- AES-256-GCM (authenticated)
- Random 16-byte salt per encryption
- Random 12-byte IV per encryption
- Output: Base64 of "CR1" + iteration count (4 bytes, big-endian) + salt + IV + ciphertext + 16-byte tag
Key Derivation
- PBKDF2 with SHA-256
- Configurable iteration count
- 256-bit derived key
- Unique salt prevents rainbow tables