Client-Side Encrypt / Decrypt AES-GCM + PBKDF2

Runs entirely in your browser - no network calls. Use a strong passphrase. Ciphertext is JSON (base64 fields) you can copy/paste anywhere.

Encrypt

Notes: 200k PBKDF2 iterations, SHA-256, 16-byte salt, 12-byte IV, AES-GCM 256-bit key.

Decrypt

Ciphertext format

Example structure (copy/paste safe):
{
  "v": 1,
  "kdf": "PBKDF2",
  "iter": 200000,
  "hash": "SHA-256",
  "alg": "AES-GCM",
  "salt_b64": "...",
  "iv_b64": "...",
  "ct_b64": "..."
}