AES-256 Encryptor
Encrypts or decrypts text or a file entirely in this browser tab — nothing is ever uploaded anywhere.
AES-256-GCM (authenticated encryption — tampering makes decryption fail loudly, not silently), key derived with PBKDF2-HMAC-SHA256 at 600,000 iterations (OWASP’s current recommendation for this KDF). Not Argon2id: Web Crypto API has no native Argon2id, and a third-party WASM implementation would be a worse tradeoff than PBKDF2’s native, browser-audited one for the most security-critical part of this app. There is no password recovery — a forgotten password permanently loses access to the encrypted data.