AES Encrypt

Encrypt text using AES-256-GCM — industry-standard authenticated encryption with a password or key.

About AES Encryption

AES (Advanced Encryption Standard) is the most widely used symmetric encryption algorithm in the world, adopted by the US government and used in TLS, disk encryption, file encryption, and secure messaging. AES-256 uses a 256-bit key and is considered quantum-resistant for the foreseeable future.

This tool uses AES-256-GCM (Galois/Counter Mode), which is an authenticated encryption mode that provides both confidentiality (the data is encrypted) and integrity (tampering with the ciphertext is detectable). The password is derived into a 256-bit key using PBKDF2-SHA256 with a random salt and 100,000 iterations. A random 12-byte IV (initialization vector) is generated for each encryption — never reused. The salt, IV, and ciphertext are combined and Base64-encoded for easy storage and transmission.

FAQ

Is this tool suitable for encrypting sensitive data?
This tool demonstrates AES encryption using correct parameters (AES-256-GCM, random IV, PBKDF2 key derivation). For production encryption of highly sensitive data, use a vetted cryptography library in your application language rather than a browser-based tool.
Why use GCM mode instead of CBC?
AES-GCM provides authenticated encryption — it detects if the ciphertext has been tampered with. AES-CBC only provides confidentiality and is vulnerable to padding oracle attacks if not carefully implemented. GCM is the current recommended mode for AES.

Related Tools

AES DecryptSecurity ToolsHMAC GeneratorSecurity ToolsBase64 EncodeSecurity ToolsRSA Key GeneratorSecurity ToolsPassword GeneratorSecurity Tools