Como usar: AES Encrypt & Decrypt
- Choose Encrypt or Decrypt and the format.
- Enter a strong password.
- Paste the text and click the button.
- To decrypt later you need the same password and format — store the password safely.
Two formats
| AES-256-GCM (default) | OpenSSL AES-256-CBC | |
|---|---|---|
| Cipher | AES-256 in Galois/Counter Mode — authenticated | AES-256 in CBC mode with PKCS#7 padding |
| Key derivation | PBKDF2-SHA256, 600,000 iterations, 16-byte salt | PBKDF2-SHA256, configurable iterations (OpenSSL default 10,000), 8-byte salt |
| Tamper detection | Yes — modified data fails to decrypt | No — only padding errors |
| Compatible with | This tool and any code that follows the documented layout | openssl enc -aes-256-cbc -pbkdf2 -a |
The GCM output is Base64(salt ‖ IV ‖ ciphertext ‖ tag), so the Web Crypto API, Node.js (crypto.createDecipheriv('aes-256-gcm', …)) or Python’s cryptography package can decrypt it with the same parameters.
Decrypting OpenSSL output
Text encrypted with
echo -n "secret" | openssl enc -aes-256-cbc -pbkdf2 -salt -a -A -pass pass:YOURPASSstarts with U2FsdGVkX1 (Base64 for “Salted__”) and can be decrypted here with the OpenSSL format. Without -pbkdf2, OpenSSL uses the old, weak EVP_BytesToKey derivation, which this tool does not support — always add -pbkdf2.
Password strength matters most
AES-256 itself cannot be brute-forced, but a weak password can. PBKDF2 slows each guess down, yet an 8-character password is still guessable. Use a long passphrase — the password generator helps. For one-way storage of passwords use bcrypt instead; for signatures use HMAC.
Também pesquisado como: aes encryption online, aes 256 encrypt, aes decrypt, encrypt text with password, openssl enc decrypt, aes gcm, encrypt text online.
Ferramentas que combinam com: AES Encrypt & Decrypt
- Codificação/Decodificação Base64 — Converte texto para Base64 e vice-versa, com suporte total a UTF-8 (acentos, emojis); alterna para Base64 seguro para URLs; ou arrasta um arquivo para obter sua string Base64 ou URI de dados.
- Hash Generator — Compute MD5 and SHA hashes of any text or file instantly, create HMAC signatures, and paste an expected checksum to verify a download.
- Decodificador JWT — Cole um JSON Web Token para analisar seu cabeçalho e sua carga, verificar quando ele expira e conferir sua assinatura.
- IBAN Validator — Check whether an IBAN is valid before you send money or save it: the country, the length for that country, the account format and the mod-97 checksum.