ToolPuma Logo

AES Encrypt

Encrypt text with AES (GCM, CBC, or CTR).

Note: The key is derived from the password with SHA-256 and a fresh random IV is used for every encryption. The output format is iv:ciphertext as lowercase hex. For AES-GCM the ciphertext is authenticated (tamper and wrong-password detection); CBC and CTR are not — use GCM for secure data.

What Is a AES Encrypt?

The AES Encrypt tool encrypts text with the AES (Advanced Encryption Standard) algorithm directly in your browser using the Web Crypto API. It supports the three major modes — authenticated GCM, plus CBC and CTR — and derives a 256-bit key from your password with SHA-256. All encryption happens locally; nothing is uploaded.

How to Use This AES Encrypt

  1. 1
    Choose ModeSelect AES-GCM, AES-CBC, or AES-CTR.
  2. 2
    Enter PasswordType the password used to derive the encryption key.
  3. 3
    Enter TextType your plaintext and click the Encrypt button. The output is a random iv:ciphertext hex string.

Frequently Asked Questions

No. Encryption runs entirely in your browser with the Web Crypto API. Your plaintext and password never leave your device.
AES-GCM is strongly recommended. It is authenticated, meaning it also detects tampering and wrong passwords. CBC and CTR provide confidentiality only.
A fresh random IV (initialization vector) is generated for each encryption. Encrypting the same text twice produces different ciphertext, which is the correct and secure behavior.