ChaCha20-Poly1305

ChaCha20-Poly1305 is a modern authenticated cipher (RFC 8439): as secure as AES-GCM and faster on devices without AES hardware. XChaCha20-Poly1305 uses a 24-byte nonce, long enough to pick at random for every message without ever worrying about a repeat.

Runs 100% in your browser — nothing is uploaded

Everything happens in this browser tab.

Algorithm

recommendedA modern authenticated cipher (RFC 8439), used in TLS 1.3, WireGuard and SSH. Fast without AES hardware.

Secret

Password

Key derivation

Iterations

openssl enc -pbkdf2. Slow on purpose, which makes guessing the password expensive. The output is OpenSSL's format: "Salted__", an 8-byte random salt, then the ciphertext and the 16-byte tag (openssl enc can't do authenticated modes, so this part is specific to this tool).

Additional data

Optional. Authenticated but not encrypted, e.g. a user ID or header. The same text is needed to decrypt.

Plaintext

0 chars

Ciphertext

Ctrl+Enter in the text box works too.