Free Online AES-256-GCM Encrypt / Decrypt tool icon
AES‑256 • GCM • PBKDF2‑SHA256

Free Online AES-256-GCM Encrypt / Decrypt

AES-256-GCM encrypt / decrypt tool using PBKDF2-SHA256 key derivation. Everything runs locally in your browser.

PBKDF2
Plaintext
Encrypted output (decryptable JSON)

Tip: This tool generates random salt and iv each time. The encrypted output includes all required parameters. Use a strong password for better security.

How to Use

1. Select Mode: Toggle between 'Encrypt' and 'Decrypt' using the top buttons. 2. Set Parameters: Enter a password (for key derivation) and adjust iterations if needed. 3. Input Data: Enter plaintext on the left (Encrypt mode) or paste JSON ciphertext (Decrypt mode). 4. Run: Click the 'Run' button to generate the result in the right panel.

Tips & FAQ

Security Note All operations are performed locally using the Web Crypto API. Your password and data are never uploaded to any server.

Ciphertext Format The output is a JSON object containing ciphertext (ct), IV, salt, and iterations. The full JSON is required for decryption.

Password Safety Please remember your password. If lost, the encrypted data cannot be recovered.

File Encryption

File Encryption

Encrypt or decrypt files locally with AES-256-GCM and download either the JSON payload or the restored file, all in the browser.

PEM/JWK Converter

PEM/JWK Converter

Convert PEM/DER/JWK/JWKS locally, export JWK/JWKS and PEM/DER, and inspect key details.

ZIP Encryptor

ZIP Encryptor

Free online ZIP Encryptor. Pack files into ZIP and encrypt with AES-256-GCM locally.

RSA key generator

RSA key generator

Generate RSA-OAEP key pairs locally in your browser and export PEM public/private keys for testing and development.

Salt generator

Salt generator

Generate cryptographically secure random salt values locally in your browser with configurable length and Hex/Base64/Base64URL output formats, ideal for password hashing and token signing.

Password strength checker

Password strength checker

Evaluate password length, character types, diversity and common patterns, and combine this with database breach checks via k-anonymity so only hash prefixes are sent and your plain password stays on your device.

API key generator

API key generator

Securely generate various types of API keys with custom formats and batch generation, all locally in your browser.

Random number generator

Random number generator

Configure minimum/maximum range, count, uniqueness and output format to generate random integers using crypto.getRandomValues locally in your browser for draws, test data and simulations.

JWT generator

JWT generator

Edit JWT header and payload, choose HS256/HS384/HS512 or none, and generate signed tokens locally in your browser via Web Crypto without uploading secrets, ideal for API auth testing.

JWT token decoder

JWT token decoder

Free online JWT token decoder: decode header and payload, inspect signature segment format, and interpret common claims such as exp/nbf/iat, all locally in your browser with no token data uploaded.

HMAC generator

HMAC generator

Generate HMAC values locally in your browser using SHA-1 / SHA-256 / SHA-512 with text or hex keys, and view Hex and Base64 outputs without uploading any data.

Hash generator and checker

Hash generator and checker

Compute MD5 / SHA-1 / SHA-256 / SHA-512 hashes for text or files locally in your browser and optionally compare them with an expected value.

Base64 encoder / decoder

Base64 encoder / decoder

Encode or decode UTF-8 text to and from Base64, including URL-safe mode, with all processing done locally in your browser.

CSR generator

CSR generator

Generate Apple Developer certificate CSRs and RSA key pairs locally in your browser.

DES

DES

Legacy-compatible DES encrypt/decrypt tool with CBC/ECB modes and local-only processing.

Password Hash

Password Hash

Generate or verify bcrypt/argon2id password hashes locally in your browser with no uploads.