Web Crypto interoperability lab
AES-256-GCM encrypt and decrypt online
Create a portable AES-GCM payload in your browser. The JSON includes PBKDF2 parameters, salt, IV, ciphertext and authentication tag so the same data can be reproduced in another application.
New payloads use PBKDF2-SHA-256 with 600,000 iterations, a fresh 16-byte salt, a 12-byte IV and a 128-bit tag.
A portable AES-GCM payload, not a mystery string
Every binary value uses Base64URL. The tag is stored separately from the ciphertext, and the payload records its work factor. That makes the format inspectable and safe to evolve.
{
"version": 2,
"algorithm": "AES-256-GCM",
"kdf": { "name": "PBKDF2", "hash": "SHA-256", "iterations": 600000, "salt": "..." },
"iv": "...", "ciphertext": "...", "tag": "..."
}Legacy token compatibility
Older HashyTools tokens use GCM.salt.iv.ciphertext or CBC.salt.iv.ciphertext with 150,000 PBKDF2 iterations. They remain available for migration, but new integrations should use the JSON format above and AES-GCM.
What runs locally
- Your plaintext and passphrase stay in the browser.
- AES-GCM authenticates the ciphertext before plaintext is released.
- Associated data can bind visible metadata without encrypting it.
- This utility is for secure transport and test data, not password storage or key management.
Written and technically reviewed by Jorge. Cryptographic method reviewed August 31, 2026 against the Web Crypto API and the published deterministic interoperability vector.
Choose a developer tool
- Hash generator
Generate MD5, SHA-1, and SHA-256 digests locally with Web Workers.
- JWT verifier
Decode claims and verify HMAC signatures without network calls.
- Base64 encoder & decoder
Convert any text to or from Base64 without leaving your browser.
More tools for data, text and testing
- JSON formatter
Validate, format, and diff JSON without network calls.
- XML formatter
Format, minify and inspect XML locally with tree view and JSON conversion.
- Regex tester
Experiment with regular expressions and capture groups locally.
- URL encoder and inspector
Encode components and inspect query parameters locally.
- UUID v4 generator
Create collision-resistant UUID v4 identifiers using Web Crypto.
- Secure password generator
Build strong passwords with custom length, charset, and entropy.
- Epoch time converter
Translate Unix timestamps into readable dates and back again.
- Text transformer
Convert case, slugify, and clean strings on-device.
- Color converter
Switch between HEX, RGB, HSL, and Tailwind palettes instantly.
- QR code builder
Design QR codes for text, Wi-Fi, contacts, email, or SMS locally.
- Barcode maker
Generate EAN and Code 128 barcodes and download crisp PNG output.
- IP lookup
Look up your public IP using disclosed external services.
- Lorem ipsum generator
Produce paragraphs, lists, and markdown filler text fast.
Run the AES interoperability guide or read how these tools are checked.