DES Encrypt/Decrypt
EncryptionProcessed locally in your browser using the Web Crypto API. Nothing is sent to any server.
How It Works
This tool provides DES and 3DES (Triple DES) encryption and decryption using the crypto-js library. All cryptographic operations happen locally in your browser — your key, IV, and data never leave your device.
How It Works
- DES: Uses 56-bit key with 16-round Feistel network. Broken since 1999 (EFF DES Cracker).
- 3DES: Applies DES three times with 3 different keys (168-bit effective). Deprecated by NIST in 2023.
- CBC mode: Cipher Block Chaining uses an IV and chains blocks together for better security.
- ECB mode: Electronic Codebook encrypts each block independently (not recommended, can reveal patterns).
- Padding: Uses PKCS7 padding to ensure plaintext is a multiple of the 8-byte block size.
- Output formats: Choose Base64 (compact, for emails/web) or Hex (for code/config files).
Encryption Formats
- Standard: Uses explicit key and IV. You control all parameters. Best for custom implementations.
- OpenSSL Compatible: Uses passphrase with automatic salt and IV generation (EVP_BytesToKey with MD5). Compatible with
openssl enccommand and other online tools. Ciphertext starts with "Salted__" (Base64:U2FsdGVkX1).
DES vs 3DES vs AES
- DES: 56-bit key, broken, do not use for new systems
- 3DES: 168-bit key, deprecated, legacy compatibility only
- AES: 128/192/256-bit key, current standard, recommended for all new systems
Frequently Asked Questions
Is DES encryption secure?
No. DES uses a 56-bit key that can be brute-forced in hours with modern hardware. It was officially deprecated by NIST in 2005. Use AES-256 for any real encryption needs. This tool is provided for legacy system compatibility and educational purposes only.
What is the difference between DES and 3DES?
3DES (Triple DES) applies DES three times with different keys, providing 168-bit effective key length. It is more secure than single DES but still deprecated by NIST (2023). 3DES is slower than AES and should only be used for legacy system compatibility.
What is the difference between CBC and ECB modes?
CBC (Cipher Block Chaining) uses an IV and chains each block with the previous one, providing better security. ECB (Electronic Codebook) encrypts each block independently, which can reveal patterns in the data. Always prefer CBC mode when possible.
Why do I need an IV (Initialization Vector)?
An IV is required for CBC mode to ensure that the same plaintext encrypted with the same key produces different ciphertext each time. The IV does not need to be secret but should be unique for each encryption. ECB mode does not require an IV.
Is my data sent anywhere?
No. All encryption and decryption happens locally in your browser using the crypto-js library. Your key, IV, and data never leave your device. This tool has no backend server — it is a pure client-side application.
What key length do I need?
DES requires an 8-byte (64-bit) key. 3DES requires a 24-byte (192-bit) key. Note that DES has only 56 effective key bits due to parity bits, and 3DES has 168 effective bits. Keys are typically entered as ASCII text.
Can I decrypt ciphertext from other tools?
Yes. If the ciphertext starts with "U2FsdGVkX1" (Base64 for "Salted__"), it is OpenSSL format. Select "OpenSSL Compatible" encryption format, enter the passphrase, and the tool will automatically detect and decrypt it. For non-OpenSSL ciphertext, select "Standard" format and enter the exact key and IV used for encryption.
Privacy Note
This tool runs entirely in your browser. Your input is never uploaded, stored, or sent to any server.
Disclaimer: This tool is provided for educational and informational purposes only. The results do not constitute professional security advice. Use at your own discretion.