How does text encryption work?
This tool derives an encryption key from your password with PBKDF2-SHA-256, then encrypts the text with AES-256-GCM. A random salt and IV are packaged with the encrypted data in the versioned HC1 output. The recipient uses the HC1 text and the correct password to derive the same key and decrypt the message in their own browser.
Why does the password matter?
The security of encrypted text depends not only on the algorithm but also on how difficult your password is to guess. Use a long, unique password. Hesapica does not store your password and cannot recover a forgotten one.
How should I share an HC1 message?
You can send the encrypted output beginning with HC1 through a messaging app, email, or another channel. When possible, share the password through a separate trusted channel. Altering or truncating the encrypted text will cause decryption to fail.
Encryption and decryption use the Web Crypto API in your browser. This page is not designed to send plaintext or passwords to a server. Device security, malicious browser extensions, screenshots, and weak password choices are outside the tool’s control.