UUID Studio

AES Encrypt & Decrypt

Password-based AES-GCM and AES-CBC in the browser.

  • đź”’ No data stored or uploaded
  • ⚡ 100% client-side
  • 🆓 Free, no account
Click Convert when ready

Override only when Auto cannot parse your paste. Changing this loads a matching sample into Input — click Convert to run. Use Load sample to cycle every format example.

All conversions

Read-only representations of the same 16 bytes. Every textual form is listed here, not in “Prefer format”.

Paste two values: if both sides are valid JSON, a structural diff appears; otherwise UUID / bytes are compared when both decode to the same format.

A
B

Create or edit JSON here (syntax colors), then format, validate, or convert - same as MongoDB $binary UUID blobs on the Convert tab once detected.

New document

Hash, HMAC, AES-GCM/CBC + RSA-OAEP, codecs, JWT decoding, UUID v4, and secure random - all client-side. JWTs use Base64URL (three segments), not a single MIME Base64 block - use Decode JWT below, not raw Base64 decode.

Examples

  • Plaintext
    Sensitive config value

About AES Encrypt & Decrypt

AES is the standard symmetric cipher, but 'AES' alone isn't a complete answer - you also need a mode (GCM or CBC), a way to turn a password into a key (PBKDF2), and somewhere to put the salt and IV. This tool handles all of that.

Pick GCM (authenticated, recommended for new work) or CBC (for compatibility with older systems), encrypt with a passphrase, and get back a self-contained JSON envelope with salt, IV, and ciphertext. Decrypt by pasting that envelope and the same passphrase.

This is built for local experiments and understanding how the pieces fit together - production systems should use vetted crypto libraries, proper key management, and rotation, not a passphrase typed into a browser tab.

FAQ

Is this production-grade?
Fine for local experiments. Production apps should use vetted libraries, KMS, and key rotation - not clipboard passphrases.
GCM vs CBC?
Prefer GCM for new work - it provides authentication. CBC is included for interoperability with older systems.