vootkit
Get Started FreeStart Free
Privacy toolTool result

Text Encrypt / Decrypt

AES-encrypt a message with a password.

100% FreeRuns instantlyNo watermark
?
  1. 1Choose toolOpen the Vootkit workspace.
  2. 2Add inputProvide the content or settings.
  3. 3ProcessLet the browser do the work.
Private by designProcessed on your device where possible.
Works on any deviceDesktop, tablet and mobile browsers.
No installationOpen the page and start working.
Always free coreUse the free plan for everyday tasks.

How to use Text Encrypt / Decrypt

Choose tool

Open the Vootkit workspace.

01
Add input

Provide the content or settings.

02
Process

Let the browser do the work.

03
Finish

Copy, download or continue.

04

Your files stay private

Your work is processed locally in your browser where possible and is never added to a Vootkit upload library.

Learn more about privacy
View all Privacy tools
Password GeneratorStrong random passwords, generated on your device. Clean private data before you share the file or link. Privacy Passphrase GeneratorMemorable word-based passwords from a secure RNG. Clean private data before you share the file or link. Privacy Password Strength CheckerHow strong a password is — checked locally. Clean private data before you share the file or link. Privacy Protect PDFAdd a password to a document before sharing it. The password is applied to the file itself. PDF File ChecksumVerify a download with its SHA-256 hash. Clean private data before you share the file or link. Privacy Metadata RemoverStrip hidden data from images and documents. Clean private data before you share the file or link. Privacy

Sending a password or a recovery phrase through chat leaves it sitting in someone else’s message history indefinitely. Encrypting it first means the copy in that history is useless without a key you shared another way.

What Text Encrypt / Decrypt does

Encrypts text with AES-GCM at 256 bits, deriving the key from your passphrase with PBKDF2 at 150,000 iterations of SHA-256. That iteration count is what makes a weak passphrase expensive to attack rather than instant.

AES-GCM is authenticated encryption: it detects tampering as well as preventing reading, so altered ciphertext fails to decrypt rather than producing plausible nonsense.

The cryptography

CipherAES-GCM, 256-bit
Key derivationPBKDF2, <strong>150,000 iterations</strong>, SHA-256
Authenticated?Yes — tampering is detected, not silently accepted
ImplementationThe browser’s own Web Crypto — no library
RunsEntirely on your device
Passphrase recovery<strong>Impossible — there is no reset</strong>
Weak pointYour passphrase, always
Share the keyThrough a different channel from the ciphertext

Detailed steps

  1. Paste the text and choose a strong passphrase.
  2. Encrypt, and send the ciphertext.
  3. Send the passphrase by a different route — if both travel through the same chat, you have gained nothing.

Worth knowing

Send the ciphertext and the passphrase through different channels. Encrypted text in an email with the password in the next paragraph is exactly as exposed as sending it in plain text — anyone who reads one reads both. Message the passphrase, or say it aloud.

Frequently Asked Questions

What if I forget the passphrase?

The text is unrecoverable. There is no reset, no backdoor and no support route, because the key exists only in your head — that is the property that makes the encryption meaningful. Write it somewhere safe before you rely on it.

How strong is this?

AES-256 in GCM mode is the standard used for classified government material, and 150,000 PBKDF2 iterations makes brute-forcing a passphrase slow. The cryptography is not the weak point; your passphrase is.

Is my text sent anywhere?

No. It uses the browser’s built-in Web Crypto and runs entirely on your device. Nothing is transmitted, which is the only arrangement under which encrypting on a website makes sense.

Can I use this for files?

It handles text. For a file, the practical route is a password-protected archive, or Protect PDF if the file is a PDF.

Is Text Encrypt / Decrypt free?

Yes. The Vootkit free plan includes 5 tool runs a day. Upgrade to Vootkit Pro for unlimited daily use, an ad-free workspace and saved workflows.

Are my files uploaded?

No. Text Encrypt / Decrypt runs entirely in your browser — your file is processed on your own device and never sent to a server. There is nothing for us to store or delete.

Do I need to install anything?

No. Text Encrypt / Decrypt works in any modern browser on desktop, tablet or phone. Open the page and start.

How often can I use it? Is there a daily limit?

On the free plan you get 5 tool runs a day. When you reach the limit you'll see a prompt to upgrade, and it resets the next day. Vootkit Pro removes the cap entirely for unlimited daily use.

This tool processes everything locally in your browser. You can disconnect from the internet after the page loads and it will still work.