🔐 AES Encrypt / Decrypt

Uses AES-GCM; the key is derived from your password via PBKDF2 (with a random salt and IV). The encrypted result includes the salt/IV, so it can be pasted back intact to decrypt. Everything runs locally — nothing is uploaded.