← Back to all tools
AES Encryption / Decryption
Advanced Encryption Standard — symmetric block cipher. All processing runs client-side.
ℹ
AES-GCM is recommended — it provides authenticated encryption (confidentiality + integrity). CBC and CTR are available for compatibility. Leave IV empty to auto-generate a secure random IV.
Settings
AES
Format for key generation
GCM: 12 bytes (24 hex chars) · CBC/CTR: 16 bytes (32 hex chars)
ℹ
When encrypting: Leave blank — a secure random IV is auto-generated and prepended to the output.
When decrypting: Leave blank if IV is prepended to ciphertext, or enter the IV used during encryption.
When decrypting: Leave blank if IV is prepended to ciphertext, or enter the IV used during encryption.
Input
0 chars
Output
Encrypted / decrypted result will appear here…
About AES & IV
The IV (Initialization Vector) is a random value used to ensure that the same plaintext encrypted twice produces different ciphertexts. It does not need to be secret but must be unique per encryption. By default, CryptoWave auto-generates a secure random IV and prepends it to the output — so you only need one string to decrypt.
GCM
12-byte IV (nonce). Provides authenticated encryption — tampering is detected automatically.
CBC
16-byte IV. Each block XORed with the previous ciphertext block before encryption.
CTR
16-byte counter/nonce. Turns AES into a stream cipher — parallelizable and no padding needed.
🔒 Web Crypto API
✓ NIST FIPS 197
✓ Zero server transmission