ToolPuma Logo

AES Encrypt

Encrypt text with AES (GCM, CBC, or CTR).

Note: The key is derived from the password with SHA-256 and a fresh random IV is used for every encryption. The output format is iv:ciphertext as lowercase hex. For AES-GCM the ciphertext is authenticated (tamper and wrong-password detection); CBC and CTR are not — use GCM for secure data.

What Is a AES Encrypt?

The AES Encrypt tool encrypts text with the AES (Advanced Encryption Standard) algorithm directly in your browser using the Web Crypto API. It supports the three major modes — authenticated GCM, plus CBC and CTR — and derives a 256-bit key from your password with SHA-256. All encryption happens locally; nothing is uploaded. This free online tool is useful for AES encryption tool, AES encrypt online, AES-GCM encryption. Common use cases include local encryption experiments, secure development, testing, and learning authenticated encryption. It is designed for quick browser-based hashing, encoding, decoding, encryption testing, checksum comparison, identifier generation, and cryptography education. For production security, follow the algorithm's current standards, key-management requirements, and application-specific security guidance.

How to Use This AES Encrypt

  1. 1
    Choose the algorithm or modeSelect the encryption method supported by the tool.
  2. 2
    Enter the required key materialProvide the password, key, and nonce/IV in the format requested.
  3. 3
    Enter the dataPaste plaintext for encryption or ciphertext for decryption.
  4. 4
    Run the operationThe browser performs the cryptographic transformation locally.
  5. 5
    Verify the resultFor real applications, follow the algorithm's nonce, key-management, authentication, and interoperability requirements.

Frequently Asked Questions

No. Encryption runs entirely in your browser with the Web Crypto API. Your plaintext and password never leave your device.
AES-GCM is strongly recommended. It is authenticated, meaning it also detects tampering and wrong passwords. CBC and CTR provide confidentiality only.
A fresh random IV (initialization vector) is generated for each encryption. Encrypting the same text twice produces different ciphertext, which is the correct and secure behavior.