RSA & AES Encrypt / Decrypt
RSA tabs do PKCS#1 v1.5 text encryption, base64-encoded, matching OpenSSL's default padding
(openssl pkeyutl -encrypt/-decrypt). AES tabs do AES-256-GCM file encryption from a
passphrase (PBKDF2-derived key) — a self-contained format for use with this page, not the OpenSSL CLI.
Everything runs locally in your browser; nothing is uploaded anywhere.
RSA Encrypt
RSA Decrypt
AES Encrypt File
AES Decrypt File
Encrypted (base64)
Private Key
Accepts -----BEGIN PRIVATE KEY----- (PKCS#8) or -----BEGIN RSA PRIVATE KEY----- (PKCS#1). Password-protected keys aren't supported — decrypt them first with openssl rsa -in key.pem -out key-unencrypted.pem. Paste it above, or load a .pem/.key file from disk. Once recognized, the key is hidden and copying out of the box is disabled; use Clear to enter a different one.
Load Private Key from File…
Clear Private Key
Decrypted (Plain Text)
Copy to clipboard
Decrypt
File to Encrypt
No file chosen.
Passphrase
A 256-bit AES-GCM key is derived from this passphrase with PBKDF2 (210,000 iterations, SHA-256) and a random salt saved in the output file. Once entered, it's hidden here and copying out of the box is disabled; use Clear to enter a different one.
Clear Passphrase
Encrypt File & Save
Runs entirely in browser memory (no streaming) — comfortable for files up to roughly a few hundred MB; very large files may be slow or exhaust memory depending on your device.
File to Decrypt
No file chosen.
Passphrase
Only decrypts files produced by the AES Encrypt tab on this page. Once entered, the passphrase is hidden here and copying out of the box is disabled; use Clear to enter a different one.
Clear Passphrase
Decrypt File & Save