Insights

Encrypted text: what it means and how to read it

Understand ciphertext, distinguish encryption from Base64, and identify the app and access needed to open a private message.

Illustration of wooden scytale with spiral-wrapped ribbon.
On this page

Encrypted text is readable text changed into ciphertext using an encryption method and a key. Decryption uses the correct key to turn it back into readable text.

In short:

  • Ciphertext needs decryption. Reading it requires the right method and key or authorized access.
  • Base64 isn't encryption. Decoding restores the underlying bytes without a secret key.
  • Chat privacy varies. The provider's access depends on where decryption happens.

How readable text becomes ciphertext

Plaintext is the original readable text. An encryption algorithm and key turn it into ciphertext, the encrypted form. An algorithm is the method used to make that transformation.

The basic flow is plaintext → encryption with a key → ciphertext → decryption with the right key → plaintext. Depending on the method, decryption uses either the same key or a different, related key. Don't assume that an encryption key is simply a password.

Why Base64 isn't encryption

RFC 4648 describes Base64 as a way to represent bytes using a public alphabet, without adding confidentiality.

Comparison pointEncrypted textBase64 encoding
Main purposeProtect readable contentRepresent bytes as text
Reversal processDecrypt with the right method and keyDecode using public rules
Secret decryption keyRequiredNot required

The RFC's example shows that Base64 turns foo into Zm9v. Decoding Zm9v returns foo without a secret key. The output looks less readable, but it doesn't keep the text private.

If someone encrypts data before applying Base64, decoding returns ciphertext, not plaintext. A Base64-looking string therefore doesn't tell you whether the underlying bytes were encrypted.

What encrypted chat adds

A standalone ciphertext block is something you copy and share. An encrypted messaging service handles encryption as part of the conversation. The important privacy question is where the message becomes readable again.

With end-to-end encryption, encryption and decryption happen on the communicating devices, so the service provider can't read the message content. Signal describes this protection for its conversations. Device-to-server encryption protects the message on its way to the server, but the server can decrypt it. Signal's legal terms state that it can't decrypt or access message or call content.

By contrast, AxCrypt's text-encryption guide describes copying encrypted text into messaging apps, documents or chat windows. That is a way to share an encrypted text item. It doesn't establish that the app receiving the pasted text encrypts the whole conversation.

What you need to read encrypted text

You need a compatible decryption method and the required key or access credentials. Ask the sender which tool created the text and which sharing mode they used. A Base64 decoder won't decrypt underlying ciphertext, and a generic decoder can't replace the required decryption method and access.

AxCrypt shows how those access rules can differ. Its Anyone sharing mode requires the custom password supplied by the sender. Its Specific user mode lets an authorized recipient decrypt through the secure link without entering a password. AxCrypt says it can't recover or reset the custom password because it doesn't have access to it.

For a message you've received, work through these checks:

  1. Identify the originating app. Ask the sender which tool created the message and use its documented decryption or secure-link process. Tools can use different formats even when they name the same encryption algorithm.
  2. Confirm the access method. Check whether you need a password, a private key or an authorized account. In AxCrypt's example, the sharing mode determines the recipient's access requirements.
  3. Keep private data out of unfamiliar tools. Don't paste the message, password or key into an arbitrary online decoder. If the documented process fails, confirm the tool, complete message and recipient access with the sender.

What to check before sharing private text

Judge unfamiliar text by how it was created and who can decrypt it, not how unreadable it looks. For a conversation, check whether the service uses end-to-end encryption and whether the provider can decrypt content. For a standalone block, check the tool, recipient access and how the required key or password will be shared. If Base64 is the only transformation, anyone who decodes it can recover the text.

Encryption is less effective when its keys aren't secure. Keep shared passwords out of insecure channels and protect the devices where readable messages appear. Ciphertext alone doesn't prove anonymity, device safety or careful handling by recipients. A recipient who can read your message can still share the readable version.

Ask an AI assistant

Share this article

Private Everywhere

Stop giving the internet everything

Keep your browsing, messages, files, and agents private.