Question 1

What algorithm is used for encryption? Is it secure?

Accepted Answer

Uses AES-256-GCM authenticated encryption. The key is derived from your password via PBKDF2 (SHA-256, 200,000 iterations). Each encryption uses a random salt and IV. GCM includes integrity checks; any modification to the ciphertext will cause decryption to fail. Everything is processed in the browser using native Web Crypto, so security depends on the strength of your password.

Question 2

Can I recover my password if I forget it? Will the data be uploaded?

Accepted Answer

No. This tool does not store passwords or retain any plaintext or ciphertext. All operations are performed locally and never uploaded. If you forget your password, the ciphertext cannot be decrypted. Please keep your password safe.

Question 3

Can other tools decrypt the ciphertext generated here?

Accepted Answer

The ciphertext uses a custom packaging format (identifier + salt + IV + ciphertext, all Base64-encoded). It must be decrypted using this tool with the same password. It is not a standard OpenSSL format; for cross-tool compatibility, use standard AES parameters via the command line.

AES Encryption/Decryption

Frequently Asked Questions