This tool uses AES-256-GCM encryption with PBKDF2 key derivation (100,000 iterations, SHA-256). Each encryption generates a unique salt and IV (initialization vector), making the same plaintext produce different ciphertexts each time. The authentication tag ensures data integrity. All encryption/decryption happens entirely in your browser using the Web Crypto API - no data is sent to any server. Keep your password safe; if lost, the data cannot be recovered.