How to encrypt and decrypt text with a password

Open CipherLingo, type or paste your text into the left-hand field, choose a password in the password field, and click Encrypt. The right-hand field then shows an encrypted, unreadable code that you can copy or share. Anyone with the code will need the exact same password to read the original message.

Paste the encrypted code into the left-hand field, enter the matching password, and click Decrypt. CipherLingo automatically recognizes encrypted text and highlights the Decrypt button. If the password is wrong or the code is incomplete, you'll see an error instead of a garbled result.

Send the encrypted code through whatever channel you'd normally use (email, chat, text message) — since it's unreadable without the password, this is safe even over channels you don't fully trust. Send the password itself through a different channel, ideally in person or over a phone call, so that no single intercepted message contains both the code and the key to read it.

The text can't be recovered. CipherLingo never stores your password or your text anywhere, which means there's no "forgot password" option and no way for anyone — including us — to decrypt a message without the correct password. Keep your password somewhere safe, such as a password manager.

A strong password is long (12+ characters) and mixes uppercase and lowercase letters, numbers, and symbols. CipherLingo includes a built-in password generator and a strength meter to help — click the generator icon next to the password field for a random, cryptographically secure password.

AES (Advanced Encryption Standard) is a symmetric encryption algorithm used worldwide by governments, banks, and security software to protect data. "Symmetric" means the same password is used to both encrypt and decrypt the text. AES-256, the variant CipherLingo uses, is considered secure against any currently known practical attack.

CipherLingo uses the CryptoJS JavaScript library to run the AES algorithm directly in your browser's memory. Your text and password are combined locally to produce the encrypted code — they never leave your device, and no network request is made to encrypt or decrypt anything. This is what "client-side encryption" means.

That's the Base64-encoded form of the text Salted__, a marker used by the OpenSSL-compatible format CryptoJS produces. It signals that a random "salt" was mixed into the encryption, which makes sure the same text and password never produce identical output twice — an important protection against certain attacks.

Yes. CipherLingo has no backend that processes your text or password — everything happens locally in your browser using JavaScript. No text, password, or encrypted result is transmitted, stored, or logged by CipherLingo. See our privacy policy for details, including the limited technical logs kept by our hosting provider.

Yes, CipherLingo is free to use directly in your browser, with no account or sign-up required.

Yes. CipherLingo works in any modern mobile browser and can also be installed as a Progressive Web App (PWA) for quick access from your home screen, without needing an app store.