Derive and Encrypt

Encrypts data with a key derived directly from a password. The derivation parameters (including the random salt) are embedded in the output blob — only the password is needed to decrypt.

Encrypt

Key Derivation Algorithm

Argon2id (recommended) PBKDF2

Encryption Algorithm

XChaCha20-Poly1305 (recommended) AES-256-CBC

Plaintext

Password

Additional Authenticated Data (AAD) — optional

@if (algorithm === 'argon2') {

Argon2 Parameters (optional)

Memory (KiB) — default: 4096

Iterations — default: 2

Lanes (parallelism) — default: 1

A random salt is generated automatically and embedded in the output blob.

} @if (algorithm === 'pbkdf2') {

PBKDF2 Parameters (optional)

Iterations — default: 600 000

Salt — leave blank to generate randomly

}

Result (base64)

Decrypt