Triple DES & DES
DES (1977) and Triple DES are retired: DES's 56-bit key can be brute-forced, and NIST stopped allowing 3DES for encryption after 2023. They're still found in payment systems, old databases and legacy file formats, so this page is for reading and writing that data. For anything new, use AES-GCM.
Runs 100% in your browser — nothing is uploaded
Everything happens in this browser tab.
legacyDES applied three times. Disallowed by NIST for encryption since 2024; only for old systems (payment terminals, legacy files).
The classic mode. Needs padding and a random IV. Doesn't detect tampering.
PKCS#7: the standard, used by OpenSSL, .NET, Java ("PKCS5Padding") and CryptoJS.
openssl enc -pbkdf2. Slow on purpose, which makes guessing the password expensive. The output is OpenSSL's format: "Salted__", an 8-byte random salt, then the ciphertext.
Plaintext
0 chars
Ciphertext
Ctrl+Enter in the text box works too.
Same thing with OpenSSL
openssl enc -des-ede3-cbc -pbkdf2 -iter 600000 -a -A -in message.txt -out message.enc
OpenSSL asks for the password. Files made either way can be opened by the other.