Your files stay on your device

AES-GCM Encrypt and Decrypt

Authenticated encryption with raw keys or PBKDF2 passphrases and a versioned envelope.
EncryptDecryptPassphrase (PBKDF2)Raw keyClearPlaintextPassphrasePBKDF2 hashIterations

60,000-1,200,000
AES keySalt (hex)Generate saltSupply my own IV (96 bits)Reusing one IV with the same key breaks GCM confidentiality: random per message is the default.IV (hex)

24 hex digits; random by default and shown after the run.
Additional authenticated data (AAD)

Authenticated but not encrypted, decrypt needs the same bytes.
HexBase64Base64url

The envelope is always base64url JSON regardless. This selects the bare ciphertext rendering.

Encrypt to get a versioned envelope: algorithm, KDF parameters, salt, IV, ciphertext, and tag in one base64url artifact.
Nothing in yet

Paste, drop, or type to begin. Everything stays on this device.

Next door in Crypto

- HKDF Deriver (/crypto/hkdf)
- Key Generator (/crypto/key-generator)
All crypto tools (/crypto)

Canonical HTML: https://nutter.tools/crypto/aes-gcm
Markdown version: https://nutter.tools/crypto/aes-gcm/index.md
Plain-text version: https://nutter.tools/crypto/aes-gcm/index.txt
Agent index: https://nutter.tools/llms.txt