So nutzt du: AES Encrypt & Decrypt
- Choose Encrypt or Decrypt and the format.
- Enter a strong password.
- Paste the text and click the button.
- To decrypt later you need the same password and format — store the password safely.
Two formats
| AES-256-GCM (default) | OpenSSL AES-256-CBC | |
|---|---|---|
| Cipher | AES-256 in Galois/Counter Mode — authenticated | AES-256 in CBC mode with PKCS#7 padding |
| Key derivation | PBKDF2-SHA256, 600,000 iterations, 16-byte salt | PBKDF2-SHA256, configurable iterations (OpenSSL default 10,000), 8-byte salt |
| Tamper detection | Yes — modified data fails to decrypt | No — only padding errors |
| Compatible with | This tool and any code that follows the documented layout | openssl enc -aes-256-cbc -pbkdf2 -a |
The GCM output is Base64(salt ‖ IV ‖ ciphertext ‖ tag), so the Web Crypto API, Node.js (crypto.createDecipheriv('aes-256-gcm', …)) or Python’s cryptography package can decrypt it with the same parameters.
Decrypting OpenSSL output
Text encrypted with
echo -n "secret" | openssl enc -aes-256-cbc -pbkdf2 -salt -a -A -pass pass:YOURPASSstarts with U2FsdGVkX1 (Base64 for “Salted__”) and can be decrypted here with the OpenSSL format. Without -pbkdf2, OpenSSL uses the old, weak EVP_BytesToKey derivation, which this tool does not support — always add -pbkdf2.
Password strength matters most
AES-256 itself cannot be brute-forced, but a weak password can. PBKDF2 slows each guess down, yet an 8-character password is still guessable. Use a long passphrase — the password generator helps. For one-way storage of passwords use bcrypt instead; for signatures use HMAC.
Auch gesucht als: aes encryption online, aes 256 encrypt, aes decrypt, encrypt text with password, openssl enc decrypt, aes gcm, encrypt text online.
Passende Tools zu: AES Encrypt & Decrypt
- Base64-Kodierung / -Dekodierung — Konvertiere Text in Base64 und zurück – mit vollständiger UTF-8-Unterstützung (Akzente, Emojis), wechsle zu URL-sicheren Base64-Werten oder zieh eine Datei per Drag & Drop hinein, um deren Base64-Zeichenkette oder Daten-URI zu erhalten.
- Hash Generator — Compute MD5 and SHA hashes of any text or file instantly, create HMAC signatures, and paste an expected checksum to verify a download.
- JWT-Decoder — Füge ein JSON-Web-Token ein, um dessen Header und Payload zu überprüfen, das Ablaufdatum zu ermitteln und die Signatur zu verifizieren.
- IBAN Validator — Check whether an IBAN is valid before you send money or save it: the country, the length for that country, the account format and the mod-97 checksum.