Encrypt Text Online
Encrypt text with a passphrase and create a share link. Older formats are available for compatibility.
Encrypt text, JSON, YAML, configuration values, or other pasted content with a passphrase. AES-256-GCM creates a versioned EOE1 envelope containing the settings required for decryption.
- Keep AES-GCM selected for new encrypted values.
- Paste the text you want to encrypt.
- Enter a passphrase to secure the data.
- Click "Encrypt," then copy the result or create a share link.
AES-GCM is the recommended default because decryption checks the authentication tag before returning text. The versioned envelope records the algorithm, salt, IV, and password-derivation settings. AES-256-CBC and 3DES remain available only for older CryptoJS or Encrypt Online values that require those formats.
Use the Decrypt Tool with the same passphrase. For AES-GCM results, "Copy share link" copies a Decrypt Tool URL. Opening that URL loads the encrypted text.
Text this tool can handle
Paste text from any of these:
- Messages and notes
- JSON
- YAML
- Configuration values
- Logs
- API payloads
Test the result in the Decrypt Tool before sharing it. The share link includes the encrypted EOE1 value without the passphrase. Send the passphrase through a separate channel. The How to Share an Encrypted Message With a Link guide covers the sender and recipient steps.
Encryption protects content with a secret. Base64 and other encodings change data representation without providing secrecy. Hashing produces a one-way digest.
Read Encryption vs Encoding vs Hashing to compare the three operations.
Read Browser-Side Cryptography Explained for browser implementation details.
Use the Base64 Encode tool when you need text-safe encoding without encryption.
Related encryption tools
- JWE Encrypt Create a standard compact token for a system that uses a shared encryption key.
- Encrypt ZIP Encrypt multiple files or one folder in a password-protected standard ZIP.
- AES-GCM Encrypt Encrypt with explicit key and nonce inputs instead of a passphrase envelope.
- OpenPGP Message Encrypt text to a recipient's public key.
- Encryption Key Generator Generate AES key bytes, nonces, and IVs.
- PBKDF2 Key Derivation Reproduce key bytes from a password, salt, and explicit settings.
Related guide
Does this tool store my data?
Encryption runs in your browser. This tool does not store or send your text or passphrase to an Encrypt Online server. Review the Privacy and Security pages for site-level services and limitations.
Which algorithms are supported?
AES-256-GCM is recommended for new values. AES-256-CBC and 3DES remain available as explicitly selected legacy compatibility methods.
What do I need to decrypt later?
Use the same passphrase with the Decrypt Tool. An EOE1 envelope includes the AES-GCM settings required for decryption. A share link loads the encrypted value without the passphrase. Select the matching method for older unprefixed values.