# AES Encryption

Encrypt and decrypt text with AES.

## URL

https://ilham.dev/tools/aes-encryption/

## What It Does

Encrypt and decrypt text with AES-GCM using a passphrase, with the key derived by PBKDF2. The output is a self-contained Base64 blob carrying the salt and the initialisation vector, so it can be decrypted later with the passphrase alone.

## Features

- Runs in the browser
- No login required

## Input

text input.

## Output

text output.

## Privacy

Processing happens locally in the browser.

No input data is uploaded to ilham.dev.

- Requires login: false
- Requires API key: false
- Stores user data: false


## Examples

- Is this strong enough for real data?
- Why does the ciphertext change every time?
- Is the passphrase sent anywhere?




## Questions

### Is this strong enough for real data?

AES-GCM and PBKDF2 are sound primitives and the construction is standard. What it cannot protect you from is a weak passphrase, or forgetting it — there is no recovery path.

### Why does the ciphertext change every time?

Because a fresh random salt and IV are generated for each encryption. The same plaintext and passphrase therefore produce a different blob, which is the intended behaviour.

### Is the passphrase sent anywhere?

No. Deriving the key and encrypting both happen in the browser.