Password GeneratorGenerate strong random passwords with your choice of length and character sets, using your browser’s cryptographic random number generator.
Text Encrypt / Decrypt
Turn a note into ciphertext you can paste into an email or a file, and turn it back with the same password. The key is derived from your password with PBKDF2-SHA-256 (600,000 iterations) and a random salt; the text is encrypted with AES-256-GCM, which also detects tampering. If you forget the password, the text cannot be recovered.
Format: QMO1.<salt>.<nonce>.<ciphertext>, Base64url. PBKDF2-SHA-256, 600,000 iterations, 16-byte salt, 12-byte nonce, AES-256-GCM.
Runs entirely in your browser. Your input and files are not uploaded to any server.
How to use
- Choose Encrypt, type your text and a strong password.
- Copy the output. It contains the salt and nonce it needs.
- To read it, choose Decrypt, paste the output and enter the same password.
Examples
Share a code with a colleague
Send the ciphertext by email and tell them the password by phone.
Wrong password
Decryption fails with a clear message instead of returning garbage.
Privacy
Runs entirely in your browser. Your input and files are not uploaded to any server. See the privacy policy for what is stored in your browser (favorites and history only). Privacy policy
Check it yourself: open your browser’s developer tools, select the Network tab and use the tool. Your file never appears in an upload request. Once this page is saved for offline use, you can also disconnect from the internet and keep working. Ads and anonymous visit statistics, when enabled, make their own requests, but they never receive your files or text.
Frequently asked questions
How secure is this?
AES-256-GCM with a PBKDF2-derived key is a standard, well-reviewed construction. The weak point is the password: use a long, random one.
Is this compatible with other tools?
The output format (QMO1 prefix, salt, nonce, ciphertext in Base64) is specific to this tool and documented on the page. Other tools will not read it directly.
Is my text sent anywhere?
No. Encryption and decryption happen on your device.
Related tools
All Security & PrivacyPassword Strength CheckerCheck how strong a password is and why.
Base64 Encoder / DecoderEncode text or files to Base64 and decode Base64 back to text or a downloadable file.
Hash Generator (SHA)Generate SHA-1, SHA-256, SHA-384 and SHA-512 hashes and HMAC signatures of text using the browser’s Web Crypto API.
EXIF Viewer & Metadata RemoverView EXIF metadata in JPG photos — camera, date, GPS location — and download a clean copy with metadata removed.
UUID GeneratorGenerate random UUID v4 or time-ordered UUID v7 identifiers in bulk using your browser’s secure random generator.