How AES Encrypt / Decrypt works
Encrypt or decrypt text snippets using AES-256-GCM through the browser's native Web Crypto API. The passphrase is stretched into a 256-bit key with PBKDF2 over a random salt, and AES-256-GCM is an authenticated mode, so any tampering with the ciphertext is detected on decryption.
Important caveats: if you forget your passphrase, the encrypted data cannot be recovered, there is no backdoor, no account, no reset mechanism. Security depends entirely on choosing a strong, unique passphrase. This tool is designed for text snippets, not large binary files.