✨ Generators

Encrypted Secret Note

Encrypt and decrypt notes with AES-GCM and a password.

How to Use Encrypted Secret Note

On the Encrypt tab, type a note and a password, then press the button — the Base64 ciphertext appears below. Copy it to the recipient, who opens the Decrypt tab and enters the same password to recover the note. The password is never stored, so send it through a separate channel from the ciphertext.

Concrete examples

  • "Room PIN is 4821" + password tea-spoon-9 → a salt.iv.body ciphertext like k3v...== . pQ... . 9aB...
  • Encrypt the same note twice → the Base64 differs each time, because the salt and IV are random
  • Decrypt tab with that ciphertext + tea-spoon-9 → "Room PIN is 4821" is recovered
  • One wrong character in the password → "Wrong password or invalid ciphertext" (no content is shown)
  • Trim or tamper with the ciphertext → AES-GCM authentication fails, same decrypt error

Safe Sharing Pattern

Send the encrypted text through one channel and the password through another channel. For example, send the ciphertext in chat and share the password by voice. This tool is for short notes and temporary sharing; it is not a password manager or long-term secure storage system.

FAQ

Is my data sent to a server?
No. Everything runs in your browser; nothing is transmitted or stored externally.
How to share?
Copy the Base64 ciphertext. Anyone with the same password can decrypt locally — no server. Send the password through a separate channel (in person, another app), not alongside the ciphertext.
What if I forget the password?
The note can't be decrypted. The password is never stored and there is no recovery path — a forgotten ciphertext is unreadable to anyone, including us. Keep the password somewhere safe.
Which encryption is used?
AES-GCM (256-bit). The password is turned into a key with PBKDF2 (SHA-256, 100,000 iterations), and a 16-byte salt and 12-byte IV are generated with crypto.getRandomValues on every encryption. The ciphertext is salt.iv.body joined as Base64, so identical input never produces identical output.