Sorawi Tools

AES Encrypt & Decrypt

Encrypt or decrypt text with AES using a passphrase. Secure, in-browser encryption with zero uploads.

Sending sensitive text over email or chat means trusting the channel — unless you encrypt it first. This tool encrypts text with AES using a passphrase, and decrypts it the same way. The passphrase is never stored or transmitted; it exists only in your browser. Encryption is done entirely on your device.

Email and chat are not private channels, and sending a password or API key in plain text means the message is recoverable by anyone who intercepts it. Encrypting with AES before sending makes the message useless without the passphrase, which you share over a different channel. The encrypted output is self-contained, so the recipient needs only the tool and the passphrase to decrypt it. Encryption happens in your browser, so neither the plaintext nor the passphrase ever passes through a server, your email provider, or your chat platform.

Storing sensitive text where it might be read is the other half of encryption. A password manager is right for dozens of credentials, but a recovery code, a client's payment details, or a two-factor backup set is easier to encrypt as one block of text. Encrypt before pasting into a cloud note, a private document, or a message you are not sure will stay private, then decrypt when you need it. Keep the passphrase somewhere separate, and AES protects confidentiality, not availability: losing the passphrase means the data is unrecoverable.

  1. 01Upload
  2. 02Configure
  3. 03Run
  4. 04Download

Loading tool...

Encryption runs through the Web Crypto API on your device. Neither the plaintext nor your passphrase ever leaves your browser — not even Sorawi Tools can see them.

How to use

How to use AES Encrypt & Decrypt

  1. 1Choose Encrypt and paste your plaintext message.
  2. 2Enter a strong passphrase — it never leaves your browser.
  3. 3Click Encrypt and copy the self-contained encrypted output.
  4. 4Share it securely; the recipient decrypts with the same passphrase.

FAQ

Frequently asked questions

Everything you need to know about aes encrypt & decrypt.

Which AES mode is used?

AES-GCM with a passphrase derived key is used, which is an authenticated encryption mode that detects any tampering with the ciphertext.

Is my data really encrypted locally?

Yes. Encryption runs through the Web Crypto API on your device, so neither the plaintext nor your passphrase ever leaves your browser.

Can I decrypt on another device?

Yes. The output is self contained and can be decrypted with the same passphrase here, so you can move encrypted text between machines.

What happens if I forget the passphrase?

The passphrase is required to derive the key, and it is not stored anywhere, so the ciphertext cannot be recovered without it. Keep it safe.

Is the ciphertext longer than the plaintext?

Yes. AES-GCM adds an initialization vector and an authentication tag to the ciphertext, so the encrypted output is larger than the original text.

What is this useful for?

It is useful for sharing sensitive text like secrets or configuration values over channels where you do not want them stored in plain form.

Guides

How to Encrypt Text with AES-256 (Fully Offline)

Protect messages and notes with AES-GCM encryption that runs entirely in your browser — no servers, no uploads, no trust required.

Related tools

same category · same privacy