Cipher locks a message with a password using real AES-256 encryption, right here in your browser. Send the scrambled text through any app — email, chat, a sticky note — and only someone with the password can read it. The password itself never travels anywhere.

Your message

Password

Cipher uses AES-256-GCM with a key derived from your password (PBKDF2, 300,000 rounds, random salt) — the same construction as our file encryption tool. The result starts with "pbox1:" so you can recognize it later. There is no recovery: a lost password means a lost message. Share the password over a different channel than the message. Everything runs on your device.