XOR Cipher Encrypter
What is XOR Cipher Encrypter
This tool encrypts text with the XOR cipher: each byte is combined with a repeating key using exclusive-or, and the result is shown as hex. XOR is symmetric, so the same key turns it back with the companion XOR decrypt tool. Everything runs in your browser, so your text and key never leave the page.
How to use
- Type or paste the text to encrypt.
- Enter your key.
- Read the hex ciphertext in the output box.
- Copy it, or share the link with your text filled in.
When to use it
XOR is a CTF staple and a simple obfuscation trick: a message XORed with a key looks like random hex. Enter a key and plaintext to get the hex, then hand it over. The recipient pastes it into the XOR decrypt tool with the same key to read the message. For real encryption, use the AES text encryption tool.
Frequently asked questions
Why is the output hex?
XOR of text and a key produces arbitrary bytes that are often not printable, so hex is a safe, readable way to carry them. The XOR decrypt tool reads that hex back.
How do I decrypt it?
Open the XOR decrypt tool, paste the hex, and enter the same key. XOR is symmetric, so the same key reverses it.
Is the XOR cipher secure?
Not with a short repeating key; it is easy to break and meant for puzzles and learning. Only a one-time pad (a truly random key as long as the message, never reused) is secure. For practical encryption, use AES.
Can I share this with my text pre-filled?
Yes. The URL updates automatically as you type. Copy it from the address bar or use the Copy link button, and anyone who opens it sees your exact text ready to go.
Related tools
XOR Cipher Decrypter
Decrypt XOR cipher hex with a key online, back to text. Free and private in your browser. Pairs with the XOR encrypt tool.
AES Text Decryption
Decrypt AES-256 encrypted text with your password in your browser. Free, private, and fully offline. No data leaves your device.
AES Text Encryption
Encrypt text with a password using AES-256 in your browser. Free, private, and fully offline. Nothing is sent to a server.