RSA / AES Encrypt & Decrypt

Encrypt and decrypt text with AES-GCM, AES-CBC or RSA-OAEP, and sign or verify with RSA-PSS. All powered by the Web Crypto API, 100% in your browser.

All encryption, decryption, signing and verification is performed locally in your browser. Keys never leave your device.

Mode

Key Length

AES-GCM uses a random 12-byte IV. Keep the IV together with the ciphertext so you can decrypt later.

Key (base64 or hex)

A 128-bit key is 16 bytes and a 256-bit key is 32 bytes. When you paste a key, its actual length is detected automatically.

Plaintext

Ciphertext (base64)

IV

How to Use

What are the crypto tools? This tool performs AES and RSA encryption, decryption, signing and verification in your browser using the Web Crypto API. Keys and plaintext never leave your device.

AES tab 1. Choose AES-GCM (recommended) or AES-CBC. 2. Pick a key length of 128 or 256 bits. 3. Generate a random key or paste an existing one. 4. Type plaintext and click Encrypt to get base64 ciphertext and an IV. 5. To decrypt, paste the key, IV and ciphertext, then click Decrypt.

RSA tab 1. Choose 2048 or 4096 bits and click Generate Key Pair. 2. Use the public key to encrypt and the private key to decrypt. 3. Use the same keys to sign with RSA-PSS and verify with SHA-256.

Tips - GCM is recommended because it includes authentication. - Keys can be exported or imported in PEM format. - All operations are local and never transmit keys.

Privacy All operations run entirely in your browser.

RSA / AES Encrypt & Decrypt — Web Crypto Tool