Shiklo Tools
PDF40
Image20
Calculators & Converters25
Text & Writing13
Developer26
Video14
Audio14
Document14
Data & Spreadsheet12
Web & SEO9
OCR & Scanning5
Archive & File12
Security & Privacy23
Health & Medical29
QR & Barcode5

AES Encryption

Encrypt and decrypt text or files with a password using AES-256-GCM and PBKDF2 — in your browser, with nothing uploaded.

Sometimes you need to send or store something private — a password list, a recovery code, account details, a contract — through a channel you don't fully trust, such as email, a chat app or a cloud drive. Encrypting it with a password means only someone who knows the password can read it.

This tool encrypts text or files with AES-256-GCM, the same authenticated encryption that protects HTTPS and banking apps. Your password is turned into a 256-bit key with PBKDF2-HMAC-SHA-256 and 600,000 iterations, using a random salt, so the same password gives a different result each time and guessing is slow.

Encrypted text comes out as Base64 you can paste anywhere; encrypted files are saved as .aes files that keep the original file name inside. Decrypting reverses it — and if the password is wrong or the data was changed, decryption refuses instead of producing garbage. Everything happens in your browser.

How to use AES Encryption

  1. Choose Text or Files, and Encrypt or Decrypt.
  2. Type a strong password (at least 8 characters).
  3. Type or paste the text, or choose the files.
  4. Copy or download the result. Share the password through a different channel.

Features

  • AES-256-GCM authenticated encryption.
  • PBKDF2-HMAC-SHA-256 with 600,000 iterations and a random salt.
  • Text encrypted to Base64; files to .aes.
  • Original file names restored on decryption.
  • Wrong passwords and tampering are detected.
  • Files up to 500 MB.
  • Web Crypto API in your browser; nothing is uploaded.

How it works

Each encryption creates a random 16-byte salt and a random 12-byte nonce. The password and salt go through PBKDF2 to produce the key, and AES-256 in GCM mode encrypts the data and adds a 16-byte authentication tag. The result stores everything needed to decrypt except the password.

PartSizePurpose
Format marker LMPBAES18 bytesRecognises data made by this tool
Iteration count4 bytesPBKDF2 setting used
Salt16 bytesMakes the key unique for every encryption
Nonce (IV)12 bytesRequired by AES-GCM, never reused
Ciphertext and tagdata + 16 bytesThe encrypted data and its integrity check

Choosing a password

Encryption is only as strong as the password. A random passphrase of four or more unrelated words, or a long random password from a password manager, is far stronger than a short word with a number. The tool requires at least 8 characters, but longer is much better. Share the password through a different channel from the encrypted data — for example, send the file by email and the password by phone. If the password is lost, nobody can recover the data, including us.

Compatibility

The output uses standard algorithms but its own simple container, so it is meant to be decrypted with this tool. Developers can decrypt it elsewhere by reading the layout above: derive the key with PBKDF2-SHA-256 using the stored salt and iteration count, then decrypt with AES-256-GCM using the stored nonce. For encrypted files that open in common archive programs, 7-Zip's AES-256 archives are an alternative; for email encryption between people, PGP keys from the PGP Key Generator are better suited.

Private by design

All encryption and decryption runs in your browser with the Web Crypto API, so the text, files and password never leave your device and nothing is logged. Large files are read into memory, so very large files may be slow on phones. Always keep an unencrypted backup until you have checked that you can decrypt the encrypted copy.

Related tools

To create a strong password, use the Password Generator; to check one, the Password Strength Checker. To derive keys yourself, use the PBKDF2 Generator, and for raw random keys, the Random Bytes Generator.

Frequently asked questions

How do I encrypt text with a password?

Choose Text and Encrypt, type a password and the text, then press Encrypt text and copy the result.

How do I decrypt it?

Choose Decrypt, type the same password, paste the encrypted text and press Decrypt text.

Which encryption is used?

AES-256-GCM with a key derived by PBKDF2-HMAC-SHA-256 (600,000 iterations).

Can I encrypt files?

Yes, up to 500 MB each; they are saved as .aes files.

What if I forget the password?

The data can't be recovered. Keep the password safe.

Is anything uploaded?

No. Encryption happens entirely in your browser.

Does it detect wrong passwords?

Yes. A wrong password or changed data makes decryption fail with a clear message.

Related tools