How it works

Wrap a text snippet (note, password, message) in AES-256-GCM encryption. Share the ciphertext, share the passphrase separately.

Type or paste the plaintext, choose Encrypt mode, type a passphrase, and the tool produces a Base64 ciphertext that bundles a magic header, random salt, IV, and AES-256-GCM ciphertext. Decryption reverses the process: paste the ciphertext, type the same passphrase, get the plaintext back. Key derivation is PBKDF2-SHA256 with 250,000 iterations and a random salt per encryption. Wrong passphrase produces an error, not garbled output, thanks to GCM's authentication tag. Useful for sending sensitive notes over an unsecured channel (e.g. pasting a password into Slack, with the passphrase shared via a different channel). The ciphertext format is custom to this site, so the recipient needs to use the same tool to decrypt. Everything happens locally, the passphrase and plaintext never leave your browser.

How to use it

1. Paste your text. A note, a password, a message — anything you need to send safely.
2. Set a passphrase. The key is derived locally via PBKDF2; the passphrase never leaves your browser.
3. Encrypt and share the ciphertext. Send the Base64 output over any channel; share the passphrase separately.
4. Decrypt on this site. The recipient pastes the ciphertext here with the same passphrase to read it.

Frequently asked questions

What encryption is used?

AES-256-GCM with PBKDF2-SHA256 (250,000 iterations) and per-encryption random salt and IV. All via Web Crypto.

Can the recipient decrypt with a different tool?

Only if they replicate this site's wrapper format. Standard AES-256-GCM tools won't recognize the LCL1 magic + salt + IV structure.

Is this end-to-end encrypted?

Yes. The plaintext and passphrase never leave your browser. Only the ciphertext is meant to be shared.

What if I lose the passphrase?

The text is unrecoverable. There's no backdoor.