Skip to main content
WorkspaceJWE Encrypt & Decrypt
Workspaces1/10
Manage projectsOpen tool tabs

Active workspace: Personal. Open tools and saved data belong to this workspace.

JWE Encrypt & Decrypt

Local processing
Encrypt and decrypt data using JSON Web Encryption
Key Algorithm (alg)
A256KW (AES Key Wrap 256-bit)
Content Algorithm (enc)
A256GCM (AES-GCM 256-bit)
Plaintext
Encryption KeyUse an exact 32-byte key (UTF-8, hex: or base64url:). Keys are never padded or truncated.Use random key bytes, not a password. For dir, the key is the content encryption key; CBC-HS uses twice the AES key length.
Standards, sources and review dates
  • JSON Web Algorithms · RFC 7518 · May 2015 · Reviewed

    JWE GCM and CBC-HMAC, direct keys and AES-KW; JWS key sizes and JWK algorithm metadata. Published vectors cover supported modes. Review interval: 180 days.