# AES Text Encryptor

> Encrypt and decrypt text with AES-256-GCM and a passphrase, entirely in your browser.

This encrypts text with AES-256-GCM, deriving the key from your passphrase using PBKDF2 with up to 1.2 million rounds. A random salt and nonce are generated per message and packed into the output, so the same text encrypted twice produces entirely different ciphertext.

**URL:** https://convertto.tech/t/aes-text-encryptor
**Category:** Hash & Crypto Tools (https://convertto.tech/c/crypto-tools)
**Privacy:** Runs entirely in the browser; no upload
**Cost:** Free, no sign-up
**Last updated:** 2026-08-01

## Key facts

- **Cipher:** AES-256-GCM — authenticated, so tampering is detected
- **Key derivation:** PBKDF2-SHA-256 at up to 1,200,000 rounds
- **Privacy:** Runs entirely in your browser — nothing is uploaded
- **Cost:** Free, unlimited, no sign-up

## How to use

1. Choose the mode.
2. Enter or paste your text.
3. Enter the passphrase — it stays in your browser and is never sent anywhere.
4. Choose the key derivation rounds.
5. Choose the ciphertext format.
6. Press Run, then download the result when it is ready.

## FAQ

### Why does encrypting the same text twice give different output?

Because a fresh random salt and nonce are used each time. That is essential: reusing a nonce with the same key in GCM catastrophically breaks the cipher, and identical ciphertext would reveal that two messages are the same.

### Can you recover my message if I forget the passphrase?

No, and nor can anyone else. The key is derived from the passphrase alone and nothing is stored. That property is what makes the encryption meaningful.

## Related tools

- [Protect PDF with Password](https://convertto.tech/t/protect-pdf): Encrypt a PDF with a password using AES-128, and choose what readers are allowed to do.
- [Passphrase Generator](https://convertto.tech/t/passphrase-generator): Generate memorable Diceware-style passphrases from random words.
- [Unlock PDF Password](https://convertto.tech/t/unlock-pdf): Decrypt a PDF you have the password for, or strip owner restrictions that need no password at all.
- [Bcrypt Hash Generator](https://convertto.tech/t/bcrypt-hash-generator): Hash a password with bcrypt at a configurable cost factor — the right way to store passwords.
- [X.509 Certificate Decoder](https://convertto.tech/t/certificate-decoder): Decode a PEM certificate to see its subject, issuer, validity, SANs and key details.
- [CRC32 Checksum Calculator](https://convertto.tech/t/crc32-checksum): Calculate a CRC32 checksum — the fast error-detection code used in ZIP and PNG files.
- [Edge Case Test String Generator](https://convertto.tech/t/edge-case-string-generator): Generate the strings that break input handling — Unicode, RTL, emoji, injection patterns and boundary lengths.
- [File Hash & Checksum Calculator](https://convertto.tech/t/file-hash-calculator): Compute SHA-256, SHA-384, SHA-512 or SHA-1 for any file and verify it against a checksum.
- [RSA & ECDSA Key Pair Generator](https://convertto.tech/t/keypair-generator): Generate an RSA or elliptic-curve key pair in your browser, exported as PEM or JWK.