Encrypt Text Online

Use this encrypt online tool to encrypt text, strings, JSON, YAML, and configuration values. The recommended method creates a password-based AES-GCM envelope that includes the parameters the matching Decrypt Tool needs.

1. Keep AES-GCM selected for new encrypted values.
2. Paste the text you want to encrypt.
3. Enter a passphrase to secure the data.
4. Click "Encrypt," then copy the result or create a share link.

AES-GCM is the recommended default because decryption checks the authentication tag before returning text. The versioned envelope records the algorithm, salt, IV, and password-derivation settings. AES-256-CBC and 3DES remain available only for older CryptoJS or Encrypt Online values that require those formats.

Use the Decrypt Tool with the same passphrase. For an AES-GCM result, Copy share link opens that page with the encrypted text already loaded.

You can encrypt any text value, including:

• Text
• Strings
• JSON
• YAML
• Config files
• Logs and API payloads

Run a decrypt test first. A share link contains the encrypted EOE1 value, not the passphrase, so send the passphrase through a separate channel. Visit the Guides section for deeper explanations and best practices.

Encryption uses a secret to protect content. Encoding, including Base64, changes how data is represented but does not make it secret. Hashing is one-way and serves a different job again.

For a quick comparison, see our Encryption vs Encoding vs Hashing guide.

For a broader technical overview, read Browser-Side Cryptography Explained.

Use the Base64 Encode tool when you need text-safe encoding without encryption.

• JWE Encrypt - Create a standard compact token for a system that uses a shared encryption key.
• Encrypt ZIP - Encrypt multiple files or one folder in a password-protected standard ZIP.
• AES-GCM Encrypt - Encrypt with explicit key and nonce inputs instead of a passphrase envelope.
• OpenPGP Message - Encrypt text to a recipient's public key.
• Encryption Key Generator - Generate AES key bytes, nonces, and IVs.
• PBKDF2 Key Derivation - Reproduce key bytes from a password, salt, and explicit settings.
• Encrypt Text with OpenSSL - Compare a separate command-line format and its parameters.