Text & file encryptor. Locked before it leaves.

How to use the Text & File Encryptor

This tool locks text or a whole file with a password using AES-256-GCM, and opens it again with the same password. The password is turned into a key with PBKDF2, 150,000 rounds of SHA-256 with a fresh random salt, so the same message encrypted twice never looks the same. Use it to send a note or a file through a channel you do not fully trust, and share the password some other way.

Step by step

1. 1
   Choose what and which way

   Pick Text or File in the first switch, and Encrypt or Decrypt in the second. The labels and the main button below change to match.

2. 2
   Enter a password

   Type a password into Password, and press show to check what you typed. The strength line under it runs from Very weak to Very strong. Aim for 12 or more characters with upper and lower case letters, numbers and symbols.

3. 3
   Encrypt or decrypt text

   In Text mode, paste into Plaintext to encrypt and press Encrypt. The result appears under Encrypted (Base64); press Copy to take it. To reverse it, switch to Decrypt, paste the Base64 into Encrypted Base64 to decrypt, enter the same password and press Decrypt.

4. 4
   Encrypt or decrypt a file

   In File mode, drop a file on Drop a file to encrypt, or click it to browse, then press Encrypt & download. You get a copy with .enc added, such as report.pdf.enc. To open it, switch to Decrypt, drop the .enc file, enter the password and press the download button again.

5. 5
   Clear when you are done

   Press Clear to empty the text boxes or to remove the chosen file. The password field is not cleared, so delete it yourself on a shared computer.

Reading the result

• Encrypted text is Base64 that holds the random salt, the IV, the encrypted message and a 16 byte check. That adds 44 bytes to your message, so even the five letter word hello becomes 68 characters, and the output changes every time you press Encrypt.
• Could not decrypt, wrong password or corrupted data means the password is wrong or the Base64 or file was changed. GCM checks the data, so a wrong password fails cleanly instead of producing garbage.
• Input is not valid Base64 means extra characters crept in when you pasted. Spaces and line breaks are ignored, but anything else breaks it.
• A decrypted file downloads with .enc removed from the end of its name, so report.pdf.enc comes back as report.pdf.

Tips and common mistakes

• There is no recovery. The password is never stored, so if you lose it nobody can open the data. Keep it in a password manager.
• Send the password through a different channel from the encrypted text or file, for example a phone call rather than the same email.
• Only output from this tool can be decrypted here. It uses its own layout of salt, IV and data, so files from other encryption apps will not open.
• The original file name stays readable in the .enc name. Rename the file before you encrypt it if the name itself is sensitive.
• Decrypted text is read as UTF-8. Use File mode for anything that is not plain text.

Privacy and limits

Encryption and decryption run in your browser with the Web Crypto API. Text, files and the password are never uploaded or saved. A file is read fully into memory, so very large files can fail on a device with little free memory, and the tool needs a browser with Web Crypto on an https page.

Back to the tool

Everything a private encryptor should do.

• Encrypt any text with a password and get a portable Base64 ciphertext you can copy and share.
• Decrypt that Base64 back to plaintext instantly, in the same tab.
• Encrypt any file, document, image, archive, any type or size, and download the protected .enc file.
• Decrypt a .enc file back to its original format with the correct password.
• Check password strength live as you type, with guidance on length, case, numbers and symbols.
• Stay completely private: AES-256-GCM via Web Crypto, no uploads, no server, no account.

Frequently asked questions.

More text & code tools.

Browse the full free-tool library →