🔒 Text Encrypt & Decrypt

🎯 Benefits

• Real, standards-based security — AES-256-GCM and PBKDF2 are the same primitives used by password managers and secure messengers.
• Total privacy — your text and password never leave your device, so even we cannot read your content.
• Share sensitive notes safely — send the ciphertext over email or chat and the password by another channel.
• No lock-in — the JSON output is self-describing, so anything can decrypt it with the right password.
• Free and offline — no account, no watermark, and it works with no internet once loaded.

ℹ️ About This Tool

The ApneSoftware Text Encrypt & Decrypt tool is a professional, privacy-first utility that lets you password-protect any text — a note, a message, a password, an API key or a paragraph of sensitive information — using genuine, industry-standard cryptography, entirely inside your browser. It turns readable text into an unreadable, scrambled block that can only be turned back into the original by someone who knows the password. Unlike weak "encoders" that merely obscure text, this tool uses AES-256-GCM, the same authenticated encryption trusted by banks, governments and secure messaging apps, with keys derived from your password by PBKDF2 — so the protection is real, not cosmetic.

Every part of the process follows modern best practice. When you encrypt, the tool generates a fresh, cryptographically random 16-byte salt and 12-byte initialisation vector (IV) for that specific message, then stretches your password into a 256-bit key using PBKDF2 with SHA-256 over many thousands of iterations (adjustable from 100,000 up to 500,000). The random salt means the same password produces a completely different key each time, defeating precomputed "rainbow table" attacks, while the high iteration count makes brute-forcing the password dramatically slower. AES-GCM then encrypts the text and attaches an authentication tag, so any tampering with the ciphertext is detected on decryption — you can trust that what comes out is exactly what went in. All of this runs on the browser's built-in Web Crypto API, a hardened, native implementation, rather than hand-rolled JavaScript crypto.

Because a strong password is the foundation of the whole scheme, the tool helps you choose one. A live strength meter shows how resistant your password is, with its entropy in bits and an estimated crack time against a fast offline attacker, plus a checklist of good-practice rules. A built-in password generator creates a strong random password in one click, and you can show or hide it and confirm it to avoid typos before encrypting — a critical safeguard, because a mistyped password means the ciphertext can never be opened. You can also tune the PBKDF2 iteration count: more iterations mean stronger protection at the cost of a slightly slower operation, and the choice is stored inside the output so decryption always uses the right value.

The tool is built for real workflows, not just single messages. Encrypted output can be produced as Base64 (compact, easy to paste), Hex, or a self-describing JSON envelope that records the algorithm, key-derivation function, iteration count, salt and IV — ideal for storage or interoperability. You can upload a text file to encrypt or drag in an .enc / .json file to decrypt, and download the result as a file. Before decrypting, a metadata viewer lets you inspect an encrypted blob's algorithm, KDF, iterations and salt/IV sizes without needing the password, which is handy for verifying what you received. Live statistics show the characters, words, lines and byte size of your text, the size of the ciphertext, and how long the operation took. When you copy a result, a reminder prompts you to clear your clipboard, and after a period of inactivity the tool automatically clears passwords and results from the screen so nothing sensitive is left lying around.

Security and privacy are the entire point. This is a zero-knowledge tool: your plaintext, your password and your ciphertext are processed only in your browser's memory and are never uploaded to any server, never logged and never tracked. There is no account and no network request involved in the encryption itself, which means it also works completely offline once the page has loaded. This matters enormously for the kind of content people encrypt — recovery phrases, credentials, private messages, legal or medical information — because a tool that transmitted any of it would defeat its own purpose. It is important to understand the flip side of true encryption: because only your password can unlock the data and it is never stored anywhere, there is no "forgot password" recovery. If the password is lost, the text is gone for good — so keep the password safe, and share it with your recipient through a channel separate from the ciphertext.

Finally, the tool meets modern standards of accessibility, responsiveness and maintainability. All controls are keyboard-navigable and labelled for screen readers, focus outlines are visible, a light/dark mode and high-contrast support are provided, and the layout adapts cleanly from desktop to tablet and mobile with touch-friendly controls. It checks that your browser supports the Web Crypto API and warns you if it does not. Internally, the cryptographic workflow, password tooling, formats and file handling are organised into small, auditable functions, and the encryption core is deliberately simple and standard so it can be trusted and reviewed. In short, it is a fast, private, genuinely secure text-encryption utility suitable for everyday personal use and for a professional security-focused website alike.

ℹ️ इस टूल के बारे में

ApneSoftware Text Encrypt & Decrypt एक professional, privacy-first उपयोगिता है जो आपको किसी भी text — एक note, message, password, API key या संवेदनशील जानकारी — को असली, industry-standard cryptography से password-protect करने देती है, वह भी पूरी तरह आपके browser के अंदर। यह पढ़ने-योग्य text को एक अपठनीय, scrambled block में बदल देता है जिसे केवल password जानने वाला ही वापस मूल रूप में ला सकता है। कमज़ोर "encoders" के विपरीत जो सिर्फ़ text छिपाते हैं, यह टूल AES-256-GCM उपयोग करता है — वही authenticated encryption जिस पर banks, governments और secure messaging apps भरोसा करते हैं — और keys आपके password से PBKDF2 द्वारा प्राप्त होती हैं, इसलिए सुरक्षा वास्तविक है, दिखावटी नहीं।

प्रक्रिया का हर हिस्सा आधुनिक best practice का पालन करता है। जब आप encrypt करते हैं, टूल उस विशेष message के लिए एक ताज़ा, cryptographically random 16-byte salt और 12-byte IV बनाता है, फिर आपके password को PBKDF2 (SHA-256) से कई हज़ार iterations (100,000 से 500,000 तक समायोज्य) पर एक 256-bit key में बदलता है। random salt का अर्थ है कि एक ही password हर बार बिल्कुल अलग key बनाता है, जिससे precomputed "rainbow table" हमले विफल होते हैं, और ऊँची iteration संख्या password को brute-force करना बहुत धीमा बना देती है। फिर AES-GCM text को encrypt करता है और एक authentication tag जोड़ता है, ताकि ciphertext से कोई छेड़छाड़ decryption पर पकड़ी जाए। यह सब browser के अंतर्निहित Web Crypto API पर चलता है, न कि हाथ से लिखे JavaScript crypto पर।

चूँकि मज़बूत password पूरी योजना की नींव है, टूल आपको एक चुनने में मदद करता है। एक live strength meter दिखाता है कि आपका password कितना प्रतिरोधी है, उसकी entropy bits में और एक तेज़ offline attacker के विरुद्ध अनुमानित crack time, साथ ही अच्छी-प्रैक्टिस नियमों की एक checklist। एक अंतर्निहित password generator एक क्लिक में मज़बूत random password बनाता है, और आप उसे show/hide तथा confirm कर सकते हैं ताकि encrypt करने से पहले typo न हो — यह एक महत्वपूर्ण सुरक्षा है, क्योंकि गलत टाइप किया password मतलब ciphertext कभी नहीं खुलेगा। आप PBKDF2 iteration count भी tune कर सकते हैं, और यह चुनाव output के भीतर संग्रहित होता है ताकि decryption हमेशा सही मान उपयोग करे।

टूल असली workflows के लिए बना है। Encrypted output Base64 (compact), Hex, या एक self-describing JSON envelope के रूप में बन सकता है जो algorithm, key-derivation function, iteration count, salt और IV दर्ज करता है। आप encrypt करने के लिए text file upload कर सकते हैं या decrypt करने के लिए .enc / .json file drag कर सकते हैं, और नतीजे को file के रूप में download कर सकते हैं। Decrypt करने से पहले, एक metadata viewer आपको password के बिना ही किसी encrypted blob का algorithm, KDF, iterations और salt/IV आकार देखने देता है। Live statistics आपके text के characters, words, lines और byte आकार, ciphertext का आकार, और operation का समय दिखाते हैं। जब आप नतीजा copy करते हैं, एक reminder आपको clipboard साफ़ करने को कहता है, और निष्क्रियता के बाद टूल स्वतः passwords और results साफ़ कर देता है।

Security और privacy ही पूरा उद्देश्य हैं। यह एक zero-knowledge टूल है: आपका plaintext, password और ciphertext केवल आपके browser की memory में process होते हैं और किसी server पर upload, log या track नहीं होते। encryption में कोई network request शामिल नहीं, इसलिए page load होने के बाद यह पूरी तरह offline भी काम करता है। जिस तरह की सामग्री लोग encrypt करते हैं — recovery phrases, credentials, private messages, legal या medical जानकारी — उसके लिए यह बेहद महत्वपूर्ण है। सच्चे encryption का दूसरा पहलू समझना ज़रूरी है: चूँकि केवल आपका password data खोल सकता है और वह कहीं संग्रहित नहीं होता, कोई "forgot password" recovery नहीं है। password खो गया तो text हमेशा के लिए चला गया — इसलिए password सुरक्षित रखें और उसे ciphertext से अलग channel से साझा करें।

अंत में, टूल accessibility, responsiveness और maintainability के आधुनिक मानकों पर खरा उतरता है। सभी controls keyboard से चलते हैं और screen readers के लिए labelled हैं, focus outlines दिखते हैं, light/dark mode और high-contrast support है, और layout desktop से tablet व mobile तक साफ़-सुथरे ढलता है। यह जाँचता है कि आपका browser Web Crypto API support करता है या नहीं और न करने पर चेतावनी देता है। भीतर से, cryptographic workflow, password tooling, formats और file handling छोटे, auditable functions में व्यवस्थित हैं, और encryption core जानबूझकर सरल व standard रखा गया है ताकि उस पर भरोसा किया जा सके। संक्षेप में, यह एक तेज़, निजी, सचमुच सुरक्षित text-encryption उपयोगिता है।

🔐 Supported Encryption Standards

🛡️ Security Features

• Local-only processing — encryption and decryption never touch a server.
• Authenticated encryption — GCM detects any tampering with the ciphertext.
• Random salt & IV per message — identical inputs never produce identical output.
• Adjustable iterations — stronger key stretching against brute force.
• Session auto-clear — passwords and results are wiped after inactivity.
• Clipboard reminder — a prompt to clear your clipboard after copying secrets.
• Browser compatibility check — warns if the Web Crypto API is unavailable.

📁 File Format Support

Encrypt: upload or drag in .txt, .md or .json text to encrypt.

Decrypt: upload or drag in an .enc, .json or .txt file containing the encrypted output.

Output: Base64, Hex or JSON in the box, and download as .enc, .txt or .json; decrypted text downloads as .txt.

🚀 How To Use

1. Encrypt: type or upload your text, choose a strong password (or generate one) and confirm it.
2. Optionally set the iterations and output format, then click Encrypt.
3. Share the encrypted text and the password through separate channels.
4. Decrypt: paste or upload the encrypted text, check its metadata, enter the password and click Decrypt.
5. Copy or download the result, then clear your clipboard when done.

🌐 Browser Compatibility

Works on all modern browsers — Google Chrome, Mozilla Firefox, Microsoft Edge, Safari, Opera and Brave — on Windows, macOS, Linux, Android and iOS. It needs JavaScript and the Web Crypto API, which is available in all current browsers over HTTPS. The tool checks for support on load and warns you if encryption is unavailable (for example on an insecure page). No plugins or installation are required.

🔒 Privacy & Security

🛠️ Troubleshooting

• “Decryption failed”: the password is wrong, or the encrypted text was altered or truncated when copied. Re-check both.
• Encrypt button does nothing: enter both text and a password, and make sure the confirm password matches.
• “Web Crypto unavailable”: open the page over HTTPS in a modern browser — encryption needs a secure context.
• Lost the password: unfortunately the text cannot be recovered — there is no backdoor by design.
• Very slow encryption: lower the PBKDF2 iterations, or shorten very large text.
• Pasted text won't decrypt: make sure you copied the entire encrypted block, including all characters.