Hesapica • In-Browser Encryption

Text Encryption & Decryption

Encrypt text with a password or decrypt an HC1 message you received using the correct password. Processing happens in your browser; plaintext and passwords are not sent to Hesapica servers.

AES-256-GCMPassword-basedRuns in your browser100,000 characters

Encrypt or Decrypt Text

Choose a mode, enter the text and password. For better security, avoid sharing the password through the same channel as the encrypted text.

Text is processed on your device.
Password rule: Use at least 8 characters. Letters, numbers, spaces, and symbols are allowed; no specific symbol type is required. For stronger protection, choose a long, unique password. Hesapica cannot recover a forgotten password.

How does text encryption work?

This tool derives an encryption key from your password with PBKDF2-SHA-256, then encrypts the text with AES-256-GCM. A random salt and IV are packaged with the encrypted data in the versioned HC1 output. The recipient uses the HC1 text and the correct password to derive the same key and decrypt the message in their own browser.

Why does the password matter?

The security of encrypted text depends not only on the algorithm but also on how difficult your password is to guess. Use a long, unique password. Hesapica does not store your password and cannot recover a forgotten one.

How should I share an HC1 message?

You can send the encrypted output beginning with HC1 through a messaging app, email, or another channel. When possible, share the password through a separate trusted channel. Altering or truncating the encrypted text will cause decryption to fail.

Privacy and security note

Encryption and decryption use the Web Crypto API in your browser. This page is not designed to send plaintext or passwords to a server. Device security, malicious browser extensions, screenshots, and weak password choices are outside the tool’s control.

Frequently Asked Questions

Does the same password work on another device?

Yes. If the recipient has the complete HC1 output and the correct password, they can decrypt it in a compatible modern browser.

Can I use a different password for every message?

Yes. Each encryption operation is independent, so you can choose a different password for every message.

Will I get the same output if I encrypt the same text with the same password?

No. A new random salt and IV are generated for each operation, so the encrypted HC1 output will normally be different.

Can I recover the text if I forget the password?

No. Hesapica does not store your password and there is no password-recovery mechanism. The encrypted text is designed not to decrypt without the correct password.

What is the text length limit?

This tool accepts up to 100,000 characters per operation. The limit keeps browser performance and shareable output size practical.