Examples
-
Plaintext
Sensitive config value
About AES Encrypt & Decrypt
AES is the standard symmetric cipher, but 'AES' alone isn't a complete answer - you also need a mode (GCM or CBC), a way to turn a password into a key (PBKDF2), and somewhere to put the salt and IV. This tool handles all of that.
Pick GCM (authenticated, recommended for new work) or CBC (for compatibility with older systems), encrypt with a passphrase, and get back a self-contained JSON envelope with salt, IV, and ciphertext. Decrypt by pasting that envelope and the same passphrase.
This is built for local experiments and understanding how the pieces fit together - production systems should use vetted crypto libraries, proper key management, and rotation, not a passphrase typed into a browser tab.
FAQ
- Is this production-grade?
- Fine for local experiments. Production apps should use vetted libraries, KMS, and key rotation - not clipboard passphrases.
- GCM vs CBC?
- Prefer GCM for new work - it provides authentication. CBC is included for interoperability with older systems.