IconVault's AES Encryptor protects text with AES-256-GCM, a modern authenticated encryption standard. Your passphrase is turned into a key with PBKDF2-SHA-256 at 310,000 iterations, and every operation generates a fresh random 16-byte salt and 12-byte IV, packed together with the ciphertext in one Base64 payload you can store or share.

All cryptography runs through the browser's Web Crypto API, so your plaintext and passphrase never leave your device and nothing is uploaded. It is free to use with no signup. The honest caveat: security depends on your passphrase strength, so use a long unique passphrase, and keep a backup of anything important because a forgotten passphrase cannot be recovered.