AES Encryption
Encrypt and decrypt text using AES-CBC or AES-GCM directly in your browser.
An AES Encryption Tool is an air-gapped cryptographic utility that performs hardware-accelerated symmetric encryption and decryption in compliance with NIST FIPS 197 standards. It supports the Advanced Encryption Standard (AES) with 128-bit, 192-bit, and 256-bit key lengths across Galois/Counter Mode (AES-GCM for authenticated encryption with associated data) and Cipher Block Chaining (AES-CBC with PKCS#7 padding). Security engineers, developers, and privacy-conscious users utilize this tool to encrypt sensitive text strings, API secrets, and configuration files using passwords derived via PBKDF2 (Password-Based Key Derivation Function 2) with SHA-256 and randomized initialization vectors (IVs). Powered exclusively by the browser's native Web Cryptography API (window.crypto.subtle), all mathematical transformations, key derivations, and cipher processing execute directly in local device RAM. Your unencrypted plaintexts, secret passphrases, and cryptographic keys are never transmitted over any network or stored on remote servers.
All encryption happens locally in your browser. No data is sent to any server.
Share This Tool
Help your team and fellow developers save time with free, private client-side utilities.
Systems & Security Engineers • Applied Cryptography & High-Performance Web Tools
How to Use AES Encryption
Switch Mode
Choose Encrypt or Decrypt mode.
Enter Text
Type or paste the text you want to encrypt, or the Base64 ciphertext to decrypt.
Provide a Key
Enter a password or click 'Generate Key' for a secure random key.
Choose Mode
AES-GCM provides authentication (recommended), AES-CBC is faster.
Process
Click Encrypt/Decrypt. The result appears in Base64 format.
Practical Examples & Conversions
Message: Hello
Base64 ciphertext
AES-256-GCM Authenticated Encryption: How to Secure Data in the Browser
Deep dive into AES-GCM and AES-CBC symmetric cryptography. Learn Galois/Counter Mode authenticated encryption, 96-bit IV generation, and client-side Web Crypto security.
Read Full TutorialRelated Tools & Converters
Authoritative Standards & Citations
Calculations and algorithms on this page are implemented and verified in strict accordance with the following official technical specifications:
RFC 6238: TOTP: Time-Based One-Time Password Algorithm
Extension of the HMAC-based One-Time Password algorithm HOTP to support time-based moving factors.
NIST Special Publication 800-38D: Galois/Counter Mode (GCM)
Recommendation for block cipher modes of operation: Galois/Counter Mode (GCM) and GMAC.