Text Encrypt

Encrypts and decrypts arbitrary text using AES-256-GCM with a password-derived key. A fresh 16-byte salt and 12-byte IV are generated per encryption (using crypto.getRandomValues), the key is derived via PBKDF2 with 100,000 iterations and SHA-256, and the salt+IV+ciphertext are concatenated and Base64-encoded into a single self-contained output string. All operations use the native Web Crypto API.

1. Choose Encrypt or Decrypt mode from the toggle. 2. Enter the password (use the eye icon to reveal or hide it). 3. Paste the text: plaintext when encrypting, or a previously produced Base64 string when decrypting. 4. Click Process; the output appears in the result box with a Copy button. 5. To decrypt later, use the exact same password - the salt and IV are embedded inside the ciphertext string.

Encrypt: derive a 256-bit AES-GCM key via PBKDF2(SHA-256, 100k iterations) over the password and a random 16-byte salt; encrypt the UTF-8 plaintext with AES-GCM and a random 12-byte IV (the authentication tag is appended automatically); output Base64(salt || iv || ciphertext). Decrypt: split the Base64 blob at byte offsets 16 (salt) and 28 (IV), re-derive the key from password+salt, and call subtle.decrypt. GCM provides authenticated encryption: any tampering or wrong password causes the decrypt to throw rather than return garbage.