Privacy-first encryption in your browser
This tool uses the Web Crypto API (window.crypto.subtle) — the same hardware-backed cryptography modern browsers expose to web apps. Your plaintext, passwords, keys, and files are never uploaded to Dynamic Duniya or any third party. After the page loads, you can even disconnect from the network and the tool still works.
What is the JSON envelope?
Every encryption produces a small JSON document that contains everything needed to decrypt later: algorithm name, salt and iteration count (when you use a password), random IV (nonce), and the ciphertext. You can save that JSON as a file, paste it into a note, or Base64-wrap it for transport. Keep it confidential — anyone with the envelope and your password or key can recover the original data.
How to encrypt text or a file
- Choose Encrypt, then Text or File.
- Enter a strong password, or switch to a raw AES-256 key (32 bytes, Base64). You can generate a random key and store it safely.
- Run Encrypt. Copy or download the envelope JSON.
- Never share your password or raw key in the same channel as the envelope.
How to decrypt
- Choose Decrypt.
- Paste the envelope JSON or load the saved .json file.
- Enter the same password, or the same raw key, depending on how you encrypted.
- Click Decrypt. Text appears in the output panel; files can be downloaded with the original filename when available.
Security notes
- AES-256-GCM provides confidentiality and integrity — tampering is detected when decrypting.
- Passwords are stretched with PBKDF2-SHA-256 using a high iteration count (OWASP-aligned).
- Use a secure context (HTTPS or localhost) so Web Crypto is available.
- This is a general-purpose utility, not a replacement for audited enterprise key management or compliance programs.