Tutorials

How to Encrypt a Text Message with a Password (No App Needed)

Encrypt a message with a password in your browser using AES-256, send it over any app, and let the recipient decrypt it. Includes password-sharing rules and limits.

By Muhammad Saqlain
·Published 2026-10-29·Updated 2026-10-29·6 min read

Use this guide with

3 ToolsWebPro tools

Open the free tool(s) below and follow the steps in this guide.

The short answer

To encrypt a text message with a password, paste it into a browser-based AES-256 encryption tool, enter a strong password and copy the encrypted result. Send that result over any app. The recipient pastes it into the same tool, enters the password and reads the original text. Share the password separately, never in the same chat.

Step by step

  1. Open the text encryption tool and keep it on Encrypt.
  2. Type or paste your message.
  3. Enter a passphrase — four or more random words, or a long password from the password generator.
  4. Select Encrypt text and copy the full result, which starts with VFdQM.
  5. Paste it into email, SMS, WhatsApp or a document.
  6. Tell the recipient the password by phone or in person.
  7. They switch the tool to Decrypt, paste the text, enter the password and read the message.

What happens to your text

The tool derives a 256-bit key from your password with PBKDF2-SHA256 (600,000 iterations and a random salt), then encrypts with AES-256-GCM using a random nonce. Everything runs in your browser through the Web Crypto API; the page sends neither the message nor the password to a server.

GCM is authenticated encryption: if anyone changes a single character of the ciphertext, decryption fails rather than producing altered text.

Password-encrypted text vs an encrypted chat room

↔ Scroll table horizontally to view full data
Password-encrypted textChatCrypt room
Best forOne message or note sent over any appA live back-and-forth conversation
KeyA password you choose and shareA random key carried in the invite link
ExpiryNone — the text is readable whenever someone has the passwordRoom access ends on a timer; messages can disappear
Where it livesWherever you paste itEncrypted records on the chat server until cleanup

For an ongoing private conversation without accounts, use ChatCrypt. For a single secret you want to drop into an existing thread, password encryption is simpler.

Limits to know

  • A forgotten password cannot be recovered — not by you, not by ToolsWebPro.
  • Anyone who obtains both the ciphertext and the password can read the message.
  • Encryption does not prove who sent the message. Confirm the sender through another channel if it matters.
  • Malware on either device can read the text before encryption or after decryption.

Frequently asked questions

Can I encrypt a WhatsApp or SMS message with a password?

Yes. Encrypt the text first, then paste the encrypted string into WhatsApp, SMS or email. The recipient copies it into the same decryption tool and enters the password. The messaging app only ever sees the ciphertext.

How should I share the password?

Through a different channel than the encrypted text — say it in person or on a phone call. Sending both in the same chat defeats the encryption.

Is AES-256 secure enough?

Yes. AES-256 is not the weak point; the password is. A random passphrase of four or more words makes guessing impractical, while a short or reused password can be guessed offline.

M

Muhammad Saqlain

Cybersecurity Practitioner & Lead Engineer

Builds and tests ToolsWebPro's browser-side encryption, including ChatCrypt and the text encryption tool.

Read full author bio & credentials →