Encrypt JSON fields

Input
Output

JSON Field Encryption

Encrypt only the sensitive fields of a JSON payload, like card numbers, passwords or health data, and leave the rest readable. Each value becomes a standard JWE token (compact form), so any JOSE library can decrypt it: handy for testing banking and healthcare APIs, or for sharing a sample without exposing real values.

How do I use the Encrypt JSON fields?

  1. Paste JSON and list the fields to encrypt, by name or path (customer.email).
  2. Pick the key: a shared AES key (leave it empty to make one), a password, or an RSA public key.
  3. Switch to Decrypt with the same key, or the RSA private key, to get the values back.

What does the Encrypt JSON fields do?

  • JWE compact form, readable by jose, Nimbus, node-jose and other JOSE libraries
  • Shared key (dir + A256GCM), password (PBES2-HS512+A256KW) or RSA-OAEP-256
  • Numbers, objects and arrays come back exactly as they were
  • Fields by key name anywhere or by dotted path
  • Decrypt every encrypted value at once, or only the fields you name
  • Keys and passwords are never saved or put in share links

Frequently asked questions

Can other tools decrypt the values?
Yes. Each value is a standard JWE in compact form with AES-GCM. Password-protected values use 210,000 PBKDF2 rounds; some libraries cap this by default (in jose, raise maxPBES2Count).
Is my key sent anywhere?
No. Encryption and decryption use your browser's Web Crypto, and the key box is never saved or added to share links.
Is my data uploaded?
No. Bracely runs entirely in your browser, so nothing you paste or open leaves your device.

More JSON tools

Bracely has more than 65 JSON tools in one page. Related ones:

Runs entirely in your browser. Nothing you paste is uploaded. Made by Saurabh Pagrut. About · Privacy policy
Last updated · Version 2.6 · Changelog
Saurabh Pagrut on GitHub · LinkedIn · X · YouTube · Instagram