Worked example
Enter text and a strong password to produce ciphertext. The recipient pastes the ciphertext and decrypts with exactly the same password.
Understanding settings and results
- Password quality directly affects security. Use a sufficiently long random password.
- The ciphertext includes random information needed by the algorithm, so encrypting the same text can produce different results.
Scope and limitations
- Data cannot be recovered if the password is forgotten.
- The current compatible AES format does not provide integrity authentication and cannot detect all tampering. Do not send ciphertext and password through the same insecure channel.
Troubleshooting
- Empty or failed decryption usually means a wrong password, truncated ciphertext or incompatible format.
- Test cross-tool compatibility with nonsensitive text first.
Privacy and processing
CryptoJS handles plaintext, passwords and ciphertext locally in the browser only.