# AES Encryption Encrypt or decrypt text with a password using AES-256-GCM and PBKDF2 key-stretching — all through the browser's native Web Crypto. The password is never stored or sent; everything happens on your device. ### How it works Text is encrypted with **AES-GCM (256-bit)** via the browser's native **Web Crypto**. Your password is stretched into a key with **PBKDF2** (SHA-256, 150,000 iterations) over a random salt, and a fresh random IV is used each time — so encrypting the same text twice gives different output, as it should. The salt and IV are packed with the ciphertext into a single Base64 blob that anyone with the password can decrypt. Lose the password and the text is unrecoverable. --- *Source: [ocxly.com/aes-encryption.html](https://ocxly.com/aes-encryption.html) — OCXLY, free 100% client-side privacy-first tools. Free AES-256-GCM text encryption with PBKDF2 password key-derivation via Web Crypto, entirely in your browser.*