# Encrypt or decrypt text with a passphrase

> Wrap a text snippet (note, password, message) in AES-256-GCM encryption. Share the ciphertext, share the passphrase separately.

Open the tool: https://yourbrowsercandoit.com/text-encryptor

Encrypt sensitive text with a passphrase. Free, no signup. Runs entirely in your browser; files are never uploaded.

## How it works

Type or paste the plaintext, choose Encrypt mode, type a passphrase, and the tool produces a Base64 ciphertext that bundles a magic header, random salt, IV, and AES-256-GCM ciphertext. Decryption reverses the process: paste the ciphertext, type the same passphrase, get the plaintext back. Key derivation is PBKDF2-SHA256 with 600,000 iterations and a random salt per encryption. Wrong passphrase produces an error, not garbled output, thanks to GCM's authentication tag. Useful for sending sensitive notes over an unsecured channel (e.g. pasting a password into Slack, with the passphrase shared via a different channel). The ciphertext format is custom to this site, so the recipient needs to use the same tool to decrypt. Everything happens locally, the passphrase and plaintext never leave your browser.

## How to use it

1. **Paste your text.** A note, a password, a message — anything you need to send safely.
2. **Set a passphrase.** The key is derived locally via PBKDF2; the passphrase never leaves your browser.
3. **Encrypt and share the ciphertext.** Send the Base64 output over any channel; share the passphrase separately.
4. **Decrypt on this site.** The recipient pastes the ciphertext here with the same passphrase to read it.

## Frequently asked questions

### What encryption is used?

AES-256-GCM with PBKDF2-SHA256 (600,000 iterations) and per-encryption random salt and IV. All via Web Crypto.

### Can the recipient decrypt with a different tool?

Only if they replicate this site's wrapper format. Standard AES-256-GCM tools won't recognize the LCL2 header + salt + IV structure.

### Is this end-to-end encrypted?

Yes. The plaintext and passphrase never leave your browser. Only the ciphertext is meant to be shared.

### What if I lose the passphrase?

The text is unrecoverable. There's no backdoor.

## Related tools

- [WhatsApp chat analyzer](https://yourbrowsercandoit.com/whatsapp-chat-analyzer): Your chat in shareable cards: who texts more, who replies first, top emoji and streaks.
- [Base64 encoder](https://yourbrowsercandoit.com/base64-encoder): Encode or decode Base64, including pictures and files.
- [Text diff](https://yourbrowsercandoit.com/text-diff): Compare two blocks of text side by side.
- [Lorem Ipsum](https://yourbrowsercandoit.com/lorem-ipsum): Generate placeholder text.
- [Markdown editor](https://yourbrowsercandoit.com/markdown-editor): Write and preview Markdown side by side.
- [Word counter](https://yourbrowsercandoit.com/word-counter): Count words, characters, lines, and reading time.