🔐 Secure Message Encryptor

AES-256-GCM encryption for your messages — lock text with a password, share the token anywhere — by Dinal Studios

🔒 Encrypt a Message AES-256-GCM

Type your secret message and a strong password. You get an encrypted token you can paste into any chat, email or note — without the password it is unreadable noise.

Your encrypted token will appear here…

🔓 Decrypt a Message

Paste an encrypted token and the same password used to encrypt it. If the password is wrong — or even one character of the token was changed — decryption fails safely instead of showing garbage.

Decrypted message will appear here…

🎓 How It Works — And How to Use It Safely

AES-256-GCM — the real thing. Your message is encrypted with AES in GCM mode, the same authenticated encryption used by banks, VPNs and messaging apps. GCM adds an integrity tag: change one character of the token and decryption refuses — tampering is detected, not silently accepted.
PBKDF2 key derivation. Your password is never used directly as a key. It is stretched through PBKDF2 (SHA-256, 200,000 iterations) with a random 16-byte salt, making password-guessing attacks dramatically slower. A fresh random salt and IV are generated for every message.
Share the password SEPARATELY. Send the token in one place (e.g. email) and the password through a different channel (e.g. a call, or an in-person exchange). If both travel together, anyone who intercepts them has everything.
The password is the whole vault. There is no recovery, no backdoor, no server. Forget the password and the message is gone forever — that is what real encryption means. Use a long passphrase you can remember, or store it in a password manager.
Inside every tokenPurpose
Salt (16 bytes, random)Makes the derived key unique per message — defeats precomputed password tables.
IV (12 bytes, random)Ensures encrypting the same message twice produces completely different tokens.
Ciphertext + GCM tagThe scrambled message plus a tamper-evidence seal.
⚠️ Honest limits: this tool encrypts text you paste — it does not secure your device, your accounts or messages already sent elsewhere. If your computer itself is compromised, no web tool can protect you. For everyday chat, prefer audited end-to-end encrypted messengers; use this tool when you need to protect a specific message in an unencrypted channel.

🔒 100% private: encryption happens on your device with the Web Crypto API. Messages and passwords are never uploaded, stored or logged.

🧰 More Free Tools by Dinal Studios

Free cyber security tools that run 100% in your browser — no sign-up, no uploads, no tracking.

Encryption Playground — Caesar, Vigenère & AES LabComplete Cyber Security ToolkitStrong Password & Passphrase GeneratorSHA-256 Hash Generator & CheckerEmail Header Analyzer — SPF, DKIM, DMARCJWT Decoder — Inspect Tokens Safely