About the Text Encryptor
Text Encryptor turns a piece of text into a scrambled code that only someone with the right password can turn back into readable text. Type your text and a password, press Encrypt, and copy the result, which starts with v1. and can be pasted into an email, a chat or a note. To read it, choose Decrypt, paste the code and enter the same password. It uses well-known building blocks: a key made from your password with PBKDF2 and SHA-256 over 600,000 rounds, then AES-256-GCM encryption. The tool is not security-audited and is meant for everyday notes and messages, not for anything that needs formal security. Everything happens in your browser.
Updated September 2026
How to use the Text Encryptor
- 1Choose Encrypt, then type or paste the text you want to protect.
- 2Enter a password of at least 8 characters and press Encrypt.
- 3Copy the code that starts with v1. or download it as encrypted.txt.
- 4To read it later, choose Decrypt, paste the code, enter the password and press Decrypt.
Encrypting a message with a password
Encryption is useful when you want to store or send text through a place you don't fully trust, such as a shared document, an email or a chat. The text is scrambled before it leaves your device, and only someone who knows the password can read it.
Type your text, choose a password and press Encrypt. Key derivation is deliberately slow, so the button shows Working for a moment. Send the code through any channel, but share the password by a different route, such as in person or by phone.
What AES-256 and PBKDF2 do
AES-256 is a widely used cipher that scrambles data with a 256-bit key. GCM mode adds an authentication tag, so any change to the message is noticed when you decrypt. PBKDF2 turns your password into that key. It repeats a hash 600,000 times, which makes each password guess slow for an attacker, and a random salt means the same password gives a different key every time.
Because of the random salt and IV, encrypting the same text twice gives two different codes. Both decrypt to the same text.
Choosing a strong password
- Use a long passphrase of several unrelated words rather than a short word with a number.
- Don't reuse a password from another account.
- Avoid names, dates and anything a person who knows you could guess.
- Store it in a password manager, because it can't be recovered.
- Check a candidate with Password Strength Checker, or create one with Password Generator.
What this tool cannot protect
It hides the content of the text. It does not hide the fact that you sent something, and it does not protect a device that already has malware or a keylogger. If someone can see your screen or your keyboard, they can see your text and password.
A short or common password can still be guessed, however strong the cipher is. If you forget the password, the text is gone for good. Hash Generator is a different tool: hashes are one-way and cannot be reversed, while this one encrypts and decrypts. Base64 Encoder Decoder only re-writes data and is not encryption.
Features
- AES-256-GCM encryption with a password-based key
- 600,000 rounds of PBKDF2 to slow down guessing
- A fresh random salt and IV for every message
- Detects a wrong password or a changed message
- Copes with pasted codes that were wrapped over several lines
- Works with any language and emoji
Frequently asked questions
How does the encryption work?
Your password is turned into a 256-bit key with PBKDF2 using SHA-256 and 600,000 rounds, together with a random salt. The text is then encrypted with AES-256 in GCM mode, which also adds a tag that detects tampering. The code you copy holds a version label, the salt, the IV and the encrypted data.
Can you recover my text if I forget the password?
No. Nothing is stored anywhere, and the password is not kept, so there is no way to get the text back without it. Keep the password somewhere safe, such as a password manager.
Is my text or password sent to a server?
No. Encryption and decryption run in your browser using its built-in Web Crypto features. Your text, your password and the result stay on your device unless you copy them somewhere yourself.
How strong should my password be?
The encryption is only as strong as the password. A short or common one can be guessed, however good the cipher is. Use a long passphrase, such as four or more unrelated words, or make one with Password Generator. The tool asks for at least 8 characters, which is a minimum and not a guarantee.
Can I decrypt the text on another device?
Yes. Open this page on any device with a current browser, choose Decrypt, paste the whole code and enter the same password. The code contains everything else that is needed. Passwords are normalised to a standard form, so accented letters typed on different keyboards still match.
Is this safe enough for sensitive data?
It uses standard, well-known algorithms, but the tool itself has not been independently audited. It suits notes, messages and small secrets. For anything that needs formal security, such as legal, medical or financial records, use audited software.
Why do I get “Wrong password, or the text was changed”?
GCM checks that the data is unaltered. If the password is wrong, or even one character of the code was changed or lost while copying, the check fails and nothing is shown. Paste the whole code again and check the password's capital letters.