Text Encryptor
Text encryption

Lock a message with a password.

Encrypt a note, a password or any private text before you send it by email or chat. Only someone with the password can read it, here or on any device.

  • AES-256-GCM encryption in your browser.
  • The password and text never leave this page.
  • Works offline once loaded. No account needed.

How it works

The text is encrypted with a key made from your password. Without the password, the result is unreadable noise.

  1. Write and lock

    Type your message and choose a strong password. Your browser encrypts it with AES-256-GCM.

  2. Send the result

    Copy the text starting with ENC1: into an email, chat or note. Share the password another way, for example by phone.

  3. Unlock it here

    The recipient opens this page, pastes the text, enters the password and reads the original message.

Why use this one

Small, fast and private: one page that does one job well.

AES-256-GCM

Strong, modern encryption that also detects any change to the encrypted text.

Slow to guess

The key is made from your password with PBKDF2-SHA256 and 600,000 rounds, so each guess costs an attacker time.

Fresh every time

A new random salt and IV are used for every message, so the same text never looks the same twice.

One line to share

The result is a single line of safe characters that survives email, chat and copy-paste.

Offline

Once the page has loaded it works without internet, so you can encrypt on a disconnected computer.

Nothing stored

Your text and password are never saved or sent. Close the tab and they're gone.

Frequently asked questions

How secure is this?

It uses AES-256-GCM, the same encryption used by banks and messaging apps, with a key derived from your password using PBKDF2-SHA256 and 600,000 rounds. The weak point is the password: use a long one, such as a passphrase of 5 or more random words.

What if I forget the password?

The text can't be recovered. There is no back door and nothing is stored on any server.

How should I share the password?

Not in the same message as the encrypted text. Say it on a call, send it in a different app, or agree on it in person.

Can the recipient decrypt without this site?

The format is documented: ENC1: followed by Base64URL of a 16-byte salt, a 12-byte IV and the AES-GCM ciphertext. Any tool with PBKDF2-SHA256 (600,000 rounds) and AES-256-GCM can decrypt it. Most people will simply use this page.

Is my message sent to a server?

No. Encryption and decryption happen in your browser. The site is static files with no server code and no analytics.

More free tools

Each one runs in your browser with no sign-up and no tracking.