# AES Encrypt Decrypt > Encrypt or decrypt text with a password using AES-256-GCM and PBKDF2. Runs in your browser, nothing is uploaded. Free AES-256-GCM encryption tool. Encrypt text with a password using PBKDF2 and Web Crypto, or decrypt it. Runs in your browser, nothing is uploaded. URL: https://tools.scoreroute.com/tools/aes-encrypt-decrypt/ Markdown: https://tools.scoreroute.com/tools/aes-encrypt-decrypt/.md ## Encrypt Text with a Password Client-side AES-256-GCM encryption. Password is stretched with PBKDF2 (100,000 rounds). The output is one self-contained payload you can share over chat, email, or docs. To secure your password, we use PBKDF2-SHA256 with 100,000 rounds and a random 16-byte salt. This process generates a full AES-256 key. Each time you encrypt something, a new random IV is created. The encryption itself happens right in your browser, using the Web Crypto API. The salt, IV, and ciphertext are packed into one Base64 or Hex string. Share only the payload plus the password. During decryption the tool reads the salt and IV straight back out of that blob. You can share a Wi-Fi password, API key, or account detail through chat, email, or a shared document without exposing it in plaintext. Since AI chatbots are not capable of performing actual AES encryption, this tool handles the encryption work in a deterministic manner for you. Nothing leaves your device. The page uses only the browser Web Crypto API, sends no network requests with your data, logs nothing, and uses no cookies for the tool itself. ## How to Encrypt Text Online Pick Encrypt, paste the plaintext into the text box, and enter a password you can remember. Click Encrypt and copy the resulting payload. To read it back later, switch to Decrypt, paste the payload, enter the same password, and click Decrypt. Because the payload carries its own salt and IV, you never need to track those separately. ## How the Self-Contained Payload Works The tool builds the output from three parts joined in order: a 16-byte salt, a 12-byte IV (16 bytes for CBC), and the ciphertext produced by AES-GCM. The whole thing is then encoded as Base64 or Hex. On decryption the same layout is reversed, so the correct salt and IV are always recovered from the blob itself. No separate parameters to store, and nothing to get mixed up. ## Why AI Chatbots Cannot Encrypt Text for You An AI model predicts the next token. It does not run the AES algorithm, so any "ciphertext" it prints is invented and cannot be decrypted by anyone, including the chatbot itself. Real encryption is deterministic math: the same key, IV, and plaintext always give the same ciphertext, and the reverse only works with the exact parameters. That is exactly what this tool computes with the NIST-standard AES in your browser. ## Who Should Use This Encryption Tool Developers encrypting API keys or tokens before pasting them into shared wikis and setup docs. IT and ops people sharing server credentials through chat without leaving the password in plaintext. Anyone sending personal details through an untrusted channel by sharing the payload over one route and the password over another. Students and QA engineers testing payload formats and encryption flows. For production systems, use audited library code and a real key-management stack. ## Security Notes AES-256-GCM is only as strong as the password protecting it. Use at least 12 characters with mixed case, numbers, and symbols, and never reuse a password. There is no password recovery: if you lose the password the data is gone for good. The tool is designed for short text and test scenarios, not as a substitute for a password manager, HSM, or a production key-management service. ## Frequently Asked Questions **Is this AES encryption tool safe?** Yes for its intended use. All encryption and decryption happens in your browser with the Web Crypto API. Your text and password never leave your device, are never uploaded, logged, or stored. It is suitable for protecting short notes, API keys in docs, and test data. For production secrets, use audited library code and proper key management. **Can someone decrypt my text without the password?** No practical way exists. AES-256-GCM is the same cipher banks and VPN providers use, and the key is stretched from your password with 100,000 rounds of PBKDF2-SHA256. There is no backdoor, no master key, and no password recovery. If you lose the password, the data is gone. **Why does encrypting the same text twice give different results?** Each encryption generates a fresh random salt and random IV. Even identical plaintext produces different ciphertext every time. Both outputs decrypt to the same text with the right password. This randomization stops attackers from comparing ciphertexts to guess content. **What is a self-contained payload?** The output string packs the salt, IV, and ciphertext into one Base64 or Hex blob. You only need to share the payload plus the password. The tool reads the salt and IV back from the blob during decryption, so you do not have to store separate parameters. **What is the difference between AES-GCM and AES-CBC?** AES-GCM is authenticated encryption: it includes a tag that detects tampering and wrong passwords, so decryption fails cleanly on errors. AES-CBC only hides content and does not detect tampering; with a wrong password it may return garbage. GCM is the recommended default. **Does the tool work offline or need a server?** All cryptography runs client-side with the Web Crypto API, so no server processing is involved and no API key is required. The page itself loads over HTTPS, which is required for the browser to expose the Web Crypto API. **Can an AI chatbot encrypt text for me?** No. AI models generate text, not ciphertext. They cannot run real AES-256-GCM with a password, and any ciphertext they produce is invented and cannot be decrypted by anyone. This tool runs the actual NIST-standard algorithm deterministically in your browser. ### Related Free Tools ## References - [BIPM — SI Brochure (The International System of Units)](https://www.bipm.org/en/publications/si-brochure) - [IANA — Character Sets](https://www.iana.org/assignments/character-sets/character-sets.xhtml)