Tidy My Mac
Free tool
Encrypt text with a password
Lock a note, a password or any text with AES-256 before you send it by email or chat. Only someone with the password can read it. Everything happens in your browser; neither the text nor the password is sent anywhere.
How to use it
- Type the text and a password, and choose Encrypt.
- Send the encrypted text however you like: email, chat, a shared note.
- Tell the other person the password another way, such as a phone call. Never in the same message.
- They open this page, choose Decrypt, and paste the text and the password.
How it is encrypted
The password is turned into a 256-bit key with PBKDF2 (SHA-256, 600,000 rounds and a random salt), which makes guessing passwords slow. The text is encrypted with AES-256-GCM, which also detects any change to the encrypted text. Your browser's built-in Web Crypto does the work; this page adds no cryptography of its own.
The encryption is only as strong as the password. A short or common one can be guessed, however good the cipher. Use a long random one from the password generator, or a passphrase of five words or more.
What it is not for
This is for sending a secret once. There is no way to recover the text if the password is lost. To keep passwords, use the Passwords app on your Mac; to protect files on a disk, turn on FileVault.
Questions about encrypting text
No. The text and the password stay in your browser and are gone when you close the page. Nothing is sent to our server, so there is nothing for us to read or to leak.
No. Without the password nobody can decrypt it, including us. That is the point of encryption.
The text after tmm1. is Base64 of a 16-byte salt, a 12-byte nonce and the AES-256-GCM output. Any program that derives the key with PBKDF2-SHA-256 and 600,000 rounds can decrypt it, so you don't depend on this page.
More free security tools
Website scam checker
Type a site or paste a link: our scam and phishing lists, the domain's age and look-alike names.
Open the tool →Scam message checker
Paste an email, text or DM: the scam signs in it, and its links checked against our lists.
Open the tool →Password checker
Has a password leaked in a data breach, and how long would it take to crack? It never leaves your browser.
Open the tool →Password generator
Random passwords and passphrases, made in your browser with the length and characters you choose.
Open the tool →File checksum checker
Get a download's SHA-256 and compare it with the one its publisher lists. The file stays in your browser.
Open the tool →Link cleaner
Strip utm, fbclid and other tracking from a link, and see where a redirect link really leads.
Open the tool →Base64 encoder and decoder
Encode text to Base64 or decode it back, URL-safe alphabet included. Nothing leaves your browser.
Open the tool →Username generator
Random usernames that say nothing about you, so your accounts can't be linked together.
Open the tool →Email header analyzer
Paste an email's headers: SPF, DKIM and DMARC, the real sender, and where replies would go.
Open the tool →Mac app vulnerability checker
Is your version of Chrome, Firefox, VLC or another app safe? Known holes and the version that fixes them.
Open the tool →Report a harmful site
Found a phishing page, fake shop or scam site? Report it and we'll review it for our lists.
Open the tool →Mac privacy permissions: camera, microphone and Full Disk Access
Allow camera, microphone or Full Disk Access, and review what your apps can do.
Read the guide →Has my Mac been hacked? How to check, and what to do
Phishing, malware or real access: the places to check, and what to do in each case.
Read the guide →Stay protected with Tidy My Mac
Scan your Mac for malware, free for 7 days.
Just your email, no credit card. Then $19.99 for your first year, $59.99 a year after that.
Scan your Mac free