Text Encryption / Decryption

What is Text Encryption?

Free AES-256 text encryption. Encrypt and decrypt text with a password using AES-GCM. All processing is done in your browser — no data sent to servers. Text processing tools for writers, editors, students, and content creators. TekPulse's Text Encryption is completely free — no signup, no ads in results, and no data stored on our servers.

How to Use Text Encryption Online

1. Enter the text you want to encrypt in the Plain Text field
2. Enter a strong password in the Password field (this is the encryption key)
3. Click Encrypt — the encrypted output appears as a Base64 string
4. Share the encrypted text with the recipient. They need the same password to decrypt it
5. To decrypt: paste the Base64 string, enter the password, and click Decrypt

Text Encryption Formula & Calculation

This tool uses the browser's native Web Crypto API — the same cryptographic engine built into Chrome, Firefox, and Edge — to perform real AES-256-GCM encryption, not a custom or toy cipher.

Step 1 (Key derivation): Your password alone is not used directly as the encryption key, because passwords are often short and guessable. Instead, PBKDF2 (Password-Based Key Derivation Function 2) stretches the password through 100,000 rounds of SHA-256 hashing combined with a random 16-byte salt, producing a strong 256-bit key. This makes brute-force password guessing far slower for an attacker.
Step 2 (Encryption): AES-256-GCM then encrypts the text using that derived key and a random 12-byte IV (initialization vector). GCM mode also produces an authentication tag, so any tampering with the encrypted data is detected on decryption rather than silently producing garbled output.
Step 3 (Packaging): The salt, IV, and ciphertext are concatenated and Base64-encoded into the single text blob you copy — so decryption only needs your password plus that blob.

All of this happens entirely inside your browser tab via JavaScript's crypto.subtle interface; nothing is transmitted to any server.

Key Factors That Affect Your Result

1. Password strength — Since the key is derived from your password, a weak or reused password is the weakest link, not the AES-256 algorithm itself. Use a long, unique passphrase.
2. Salt and IV randomness — A fresh random salt and IV are generated per encryption using crypto.getRandomValues() (a cryptographically secure random source), so encrypting the same text twice with the same password produces different ciphertext each time.
3. No password recovery — Because nothing is stored server-side and the key only exists as a derivation of your password, losing the password means the encrypted text is permanently unrecoverable. There is no "forgot password" option by design.
4. PBKDF2 iteration count — 100,000 iterations is a widely used baseline (per OWASP-era guidance) that meaningfully slows down offline brute-force attempts without making encryption noticeably slow for the user.

Why Use TekPulse Text Encryption?