Encrypt Text Online

Use this encrypt online tool to encrypt text, strings, JSON, YAML, and configuration values. The recommended method creates a password-based AES-GCM envelope that includes the parameters the matching Decrypt Tool needs.

1. Keep AES-GCM selected for new encrypted values.
2. Paste the text you want to encrypt.
3. Enter a passphrase to secure the data.
4. Click "Encrypt" and copy the output on the right.

AES-GCM is the recommended default because decryption checks the authentication tag before returning text. The versioned envelope records the algorithm, salt, IV, and password-derivation settings. AES-256-CBC and 3DES remain available only for older CryptoJS or Encrypt Online values that require those formats.

Use the Decrypt Tool with the same passphrase.

You can encrypt any text value, including:

• Text
• Strings
• JSON
• YAML
• Config files
• Logs and API payloads

Run a decrypt test first. The recipient needs the same format support and passphrase, and the passphrase should travel through a different channel from the encrypted text. Visit the Guides section for deeper explanations and best practices.

Encryption uses a secret to protect content. Encoding, including Base64, changes how data is represented but does not make it secret. Hashing is one-way and serves a different job again.

For a quick comparison, see our Encryption vs Encoding vs Hashing guide.

For a broader technical overview, read Browser-Side Cryptography Explained.

Use the Base64 Encode tool when you need text-safe encoding without encryption.

• AES-GCM Encrypt - Encrypt with explicit key and nonce inputs instead of a passphrase envelope.
• OpenPGP Message - Encrypt text to a recipient's public key.
• Encryption Key Generator - Generate AES key bytes, nonces, and IVs.
• PBKDF2 Key Derivation - Reproduce key bytes from a password, salt, and explicit settings.
• Encrypt Text with OpenSSL - Compare a separate command-line format and its parameters.