WorkspaceSecurity & CryptographyClient-Side Sandbox

AES Encryption / Decryption

Authenticated AES-256-GCM client-side encryption and decryption using PBKDF2 (100,000 iterations) key derivation.

Uses real Web Crypto API (PBKDF2-SHA256 + AES-256-GCM) in your browser. If you lose the passphrase, ciphertext cannot be recovered.

Input Buffer

1 ln · 80 ch · 80 B

Secret Key / Passphrase

ENCODING: UTF-8AUTO-RUN: ENABLED

Output Buffer

OUT: 1 LN · 0 B⌘↵ RUN · ⌘⇧C COPY

How to Use AES Encryption / Decryption

Enter plaintext (to encrypt) or an encrypted Base64 bundle (to decrypt) in the main input.
Enter your passphrase in the secondary input. Uses Web Crypto AES-256-GCM with random 16-byte salt and 12-byte IV.

Run / Process tool outputCtrl + Enter

Copy primary output to clipboardCtrl + Shift + C

Open global command paletteCtrl + K

Evaluate password entropy in bits, character pool diversity, pattern weaknesses, and offline crack-time estimates.

Generate SHA-1, SHA-256, SHA-384, and SHA-512 cryptographic digests simultaneously using Web Crypto API.

Compute Hash-based Message Authentication Codes (HMAC-SHA256, HMAC-SHA384, HMAC-SHA512) with a secret key.

Generate 2048-bit or 4096-bit RSA-OAEP / RSASSA-PKCS1-v1_5 public and private key pairs in PEM (SPKI / PKCS#8) and JWK formats.

Deep security audit of JSON Web Tokens including HMAC-SHA256 signature verification, `alg: none` detection, and claim lifetime checks.

Generate CSPRNG 128-bit, 192-bit, 256-bit, and 512-bit cryptographic keys in Hex, Base64, Base64URL, and Uint8Array formats.