Text Encrypt & Decrypt
Encrypt text, API keys, and secrets with a passphrase. Share ciphertext safely with AI coding agents — they decrypt and wire the secret in without ever printing it in plaintext.
Runs in your browser. Your input is not uploaded to PayloadIQ.
Share secrets with AI agents — without exposing them
Here is the workflow: encrypt your API key or secret with a passphrase, paste the ciphertext into chat, and tell the agent the passphrase separately (or set it as an environment variable). The agent decrypts the ciphertext, stores it as a secret, wires it into the project, and validates it — never echoing the raw key in plain text. Even if your chat history is leaked, the ciphertext is useless without the passphrase.
Encryption details
The tool uses AES-256-GCM with a key derived from your passphrase via PBKDF2-SHA-256 at 210 000 iterations (OWASP 2023 recommendation). A fresh 16-byte random salt and 12-byte IV are generated for every encryption, so encrypting the same text twice produces a different ciphertext — preventing pattern analysis.
Self-describing ciphertext format
Output is a compact base64url string (URL-safe, no padding) with a 36-byte header that carries everything a decryptor needs — including the salt and iteration count — so the cost can be tuned over time without breaking old blobs: base64url( magic[3] || version[1] || iterations[4] || salt[16] || iv[12] || ciphertext+tag[N+16] ). Decrypt it with any AES-256-GCM implementation given the passphrase.
Zero uploads
All cryptographic operations run through the browser's built-in Web Crypto API. Nothing is sent to any server — no text, no key material, no metadata. Inspect the network tab to verify.