Q: Is my data secure?
Yes. All processing happens entirely in your browser. No data is ever sent to any server.
Q: How secure is AES-GCM?
AES-GCM is an authenticated encryption mode recommended by NIST and used in TLS 1.3. It provides both data confidentiality and integrity verification, making it one of the most trusted encryption modes available.
Q: What happens if I lose my password?
The encrypted data cannot be recovered without the correct password. There is no password recovery mechanism — this is by design for maximum security. Always store your password in a safe place.
Q: What is PBKDF2?
PBKDF2 (Password-Based Key Derivation Function 2) converts a password into a cryptographic key by applying a hash function many times (100,000 iterations), making brute-force attacks significantly more difficult.
Q: Is the encrypted output safe to share?
Yes. The Base64-encoded output includes the IV and salt, but cannot be decrypted without the correct secret key. You can safely share the ciphertext through any channel.