Comment utiliser : AES Encrypt & Decrypt
- Choose Encrypt or Decrypt and the format.
- Enter a strong password.
- Paste the text and click the button.
- To decrypt later you need the same password and format — store the password safely.
Two formats
| AES-256-GCM (default) | OpenSSL AES-256-CBC | |
|---|---|---|
| Cipher | AES-256 in Galois/Counter Mode — authenticated | AES-256 in CBC mode with PKCS#7 padding |
| Key derivation | PBKDF2-SHA256, 600,000 iterations, 16-byte salt | PBKDF2-SHA256, configurable iterations (OpenSSL default 10,000), 8-byte salt |
| Tamper detection | Yes — modified data fails to decrypt | No — only padding errors |
| Compatible with | This tool and any code that follows the documented layout | openssl enc -aes-256-cbc -pbkdf2 -a |
The GCM output is Base64(salt ‖ IV ‖ ciphertext ‖ tag), so the Web Crypto API, Node.js (crypto.createDecipheriv('aes-256-gcm', …)) or Python’s cryptography package can decrypt it with the same parameters.
Decrypting OpenSSL output
Text encrypted with
echo -n "secret" | openssl enc -aes-256-cbc -pbkdf2 -salt -a -A -pass pass:YOURPASSstarts with U2FsdGVkX1 (Base64 for “Salted__”) and can be decrypted here with the OpenSSL format. Without -pbkdf2, OpenSSL uses the old, weak EVP_BytesToKey derivation, which this tool does not support — always add -pbkdf2.
Password strength matters most
AES-256 itself cannot be brute-forced, but a weak password can. PBKDF2 slows each guess down, yet an 8-character password is still guessable. Use a long passphrase — the password generator helps. For one-way storage of passwords use bcrypt instead; for signatures use HMAC.
Aussi recherché comme : aes encryption online, aes 256 encrypt, aes decrypt, encrypt text with password, openssl enc decrypt, aes gcm, encrypt text online.
Outils complémentaires : AES Encrypt & Decrypt
- Encodage / Décodage Base64 — Convertissez du texte au format Base64 et inversement, avec une prise en charge complète de l'UTF-8 (accents, emojis) ; passez au format Base64 compatible URL, ou glissez-déposez un fichier pour obtenir sa chaîne Base64 ou son URI de données.
- Hash Generator — Compute MD5 and SHA hashes of any text or file instantly, create HMAC signatures, and paste an expected checksum to verify a download.
- Décodeur JWT — Collez un JSON Web Token pour examiner son en-tête et sa charge utile, vérifier sa date d'expiration et valider sa signature.
- IBAN Validator — Check whether an IBAN is valid before you send money or save it: the country, the length for that country, the account format and the mod-97 checksum.