Encrypt your text, keep it truly private

Lock any message with a password using real AES-256 encryption, right here in your browser. Add a riddle-lock, split a password with a friend, hide a decoy message, or set a time-capsule unlock date — your choice.

AES-256 encryption

Never sent to a server

Works offline once loaded

Novice Cipher

🔥 0

Quick start ?Pick a template to pre-fill a message and matching options — edit anything before encrypting.

Your message ?Type or paste the message you want to lock with a password. You can also drag & drop a .txt file here. 0 / 20000 characters

Password?Anyone who wants to unlock this text will need this exact password (or, in split mode, both halves).

Confirm password

Password strength: —

Self-destruct / time-lock ?Bakes an expiry (or a future unlock date) into the encrypted text. Checked entirely in the browser doing the decrypting — not a server-enforced guarantee.

Password hint ?Shown in cleartext to anyone with the encrypted text, before they enter a password — never reveals the password itself.

Add a second encryption layer (double password protection)

Split the password with a friend Two people each hold one half — the message only unlocks when both halves are entered together. Uses the same two password fields as the double-layer option, so pick one or the other.

Use a riddle instead of a plain hint

Add a decoy message If someone is pressured into revealing "a" password, they can give the decoy one instead — it unlocks a harmless message, not your real one.

🎭 Emoji cipher display (cosmetic only — turns the result into an emoji string, decoded automatically on the way back in)

Remember this password for my current browser tab ⚠ Stored only in this tab's memory (sessionStorage), cleared when you close it. Not recommended on shared devices.

Unlocking…

Result

Scan to copy the encrypted text on another device.

🔒 Your vault

Keep a running list of your encrypted messages in this browser so you don't have to copy-paste them elsewhere. The list itself is locked behind a vault password of your choosing — set once, then reused. This never leaves your device.

Vault is locked.

📊 Your stats & badges

This week

Badges

How to use this tool

✍️Write or paste the message you want to protect, drag a .txt file in, or pick a quick-start template.
🔑Set a password (or split it, riddle-lock it, or add a decoy) and confirm it.
🔒Press Encrypt text — your scrambled result appears below, with copy, download, share, QR, and vault options.
📋Send the encrypted text to your recipient however you like.
🔓To reverse it, switch to Decrypt, paste the text back in, enter the same password(s), and press Decrypt text.

Frequently asked questions

Is my text ever sent to a server?

No. Encryption and decryption both happen inside your own browser using JavaScript. Your message and passwords are never uploaded anywhere.

What do the vault, drafts, stats, and "remember password" actually store, and where?

All of it lives only in this browser's local or session storage — never transmitted to us or anyone else. Clearing your browser data removes it.

What happens if I forget my password?

There's no way to recover it. Since nothing is stored on a server, no one — including this website — can decrypt your text without the exact password.

What encryption method is used?

AES-256, a widely trusted industry-standard algorithm, combined with a unique random salt so the same message never encrypts the same way twice.

Are self-destruct, time-capsule, split-password, or decoy features real security guarantees?

No — they're enforced by whichever browser does the decrypting, not by a server. Someone who copies the raw encrypted text, edits their local storage, or is simply told both password halves could bypass them. Treat these as fun, honest-use conveniences, not hard security promises — never rely on them for anything with real safety stakes.

Why does decryption sometimes fail?

Usually because a password is slightly wrong, the text was altered when copying, or (if set) the message has expired, hasn't reached its unlock date yet, or has already been used once.

Is the emoji cipher mode "real" encryption?

No — it's a cosmetic, reversible substitution applied on top of the real AES output, purely for fun when sharing. The actual security comes entirely from the AES encryption underneath.

About this tool

This tool encrypts and decrypts text using AES-256 via the open-source CryptoJS library, running entirely in your browser. No backend, no database, no analytics on your message content.

Optional features — riddles, split passwords, decoys, time capsules, the vault, streaks, and badges — are implemented with plain client-side JavaScript and your browser's local storage. None of it leaves your device.

Type your message, set a password, then press Encrypt text. That's it! 🔒