AES-256-GCM Encrypt & Decrypt Online — Free & Private

A free edge API by formatho.com, privacy-first developer tools.

Free, no signup, runs entirely in your browser — your data never leaves your device.

🔓 Free🔒 Zero tracking🚫 No data collection⚡ Edge-fast

Usage

# Encrypt
curl "https://aes-encryption-formatho.filesformatho.workers.dev/api?text=secret%20message&password=hunter2"

# Decrypt (pass the envelope back)
curl "https://aes-encryption-formatho.filesformatho.workers.dev/api?envelope=%3Cbase64%3E&password=hunter2&mode=decrypt"

curl -X POST "https://aes-encryption-formatho.filesformatho.workers.dev/api" \
  -H 'Content-Type: application/json' \
  -d '{"mode":"encrypt","text":"secret message","password":"hunter2","iterations":100000}'

AES-256-GCM authenticated encryption; keys derived in-memory with PBKDF2-SHA256 (10,000–310,000 iterations, default 100,000) and a random 16-byte salt + 12-byte IV per call. The envelope embeds salt, IV and auth tag (base64(salt ‖ iv ‖ ciphertext), or hex via format). Decrypt with the same password and iteration count. GET query limit 8 KB — POST for larger text (max 128 KB).

Full parameter reference: /api endpoint.

Privacy-first: keys are derived in-memory at the edge, never cached, logged or stored — neither password nor plaintext appears in any response other than your decryption result.

Full browser tool

Encrypt & decrypt entirely client-side: Encryption tool on formatho.com.

All Formatho edge APIs

Browse every free Formatho Worker tool on the Formatho Tools index.