Which AES settings are available?

AES-128, AES-192 and AES-256, in CBC or ECB mode, with PKCS#7, ISO 9797-1, ANSI X9.23, ISO 10126, zero or no padding.

How is the IV handled?

A fresh random 16-byte IV is generated for each message and shown next to the result, so the recipient can decrypt with the same IV and passphrase.

Is this safe for real secrets?

It is the crypto-js implementation running locally, which is fine for convenience, but it is not an audited crypto library and the passphrase is the weak point. For long-lived credentials use a dedicated secret manager.

Does my passphrase leave the browser?

No. Both the text and the passphrase stay in the page — there is no key exchange and no upload.

Crypto · AES

AES encryption & decryption

Encrypt or decrypt text with AES-128/192/256 in CBC or ECB mode. Passwords and data never leave this tab.

AES-256-CBC 256 bits client-side

Encrypt text → base64

Plaintext what you want to protect

Algorithm

Password

Padding

Decrypt base64 → text

Ciphertext base64 encoded

Algorithm

Password

Padding

CBC needs an IV; ECB does not. PKCS#7 padding fits almost every consumer of AES. Runs locally — no network calls

Frequently asked

Which AES settings are available?: AES-128, AES-192 and AES-256, in CBC or ECB mode, with PKCS#7, ISO 9797-1, ANSI X9.23, ISO 10126, zero or no padding.
How is the IV handled?: A fresh random 16-byte IV is generated for each message and shown next to the result, so the recipient can decrypt with the same IV and passphrase.
Is this safe for real secrets?: It is the crypto-js implementation running locally, which is fine for convenience, but it is not an audited crypto library and the passphrase is the weak point. For long-lived credentials use a dedicated secret manager.
Does my passphrase leave the browser?: No. Both the text and the passphrase stay in the page — there is no key exchange and no upload.