ToolPuma Logo

AES-GCM Encrypt

Encrypt text with authenticated AES-GCM.

Note: The key is derived from the password with SHA-256 and a fresh random IV is used for every encryption. The output format is iv:ciphertext as lowercase hex. For AES-GCM the ciphertext is authenticated (tamper and wrong-password detection); CBC and CTR are not — use GCM for secure data.

What Is a AES-GCM Encrypt?

The AES-GCM Encrypt tool encrypts text with AES in Galois/Counter Mode, the recommended authenticated mode of operation. GCM produces both encrypted data and an authentication tag, so the AES Decrypt tool can detect any tampering or an incorrect password.

How to Use This AES-GCM Encrypt

  1. 1
    Enter PasswordType the password used to derive the key.
  2. 2
    Enter TextType your plaintext.
  3. 3
    EncryptClick 'Encrypt GCM' to produce the iv:ciphertext output and copy it.

Frequently Asked Questions

GCM is an AEAD mode: it authenticates the ciphertext as well as encrypting it. Any modification or an incorrect key causes decryption to fail securely.
This tool uses a 96-bit (12-byte) random nonce, the recommended and most secure size for AES-GCM.