AES-256-GCM explained for non-technical readers

If you've read anything about secure password managers, you've seen the acronym AES-256-GCM. It sounds like jargon, but understanding it helps you pick where to store your credentials. Here it is, with no math required.

What is AES?

AES (Advanced Encryption Standard) is the symmetric encryption algorithm adopted by the US government in 2001 after a public competition. Today it's used by banks, military systems, browsers, encrypted messengers and, of course, serious password managers.

"Symmetric" means the same key encrypts and decrypts the data. With the key, you read. Without it, you see noise.

What's the 256?

It's the key size in bits. AES supports 128, 192 and 256. The longer the key, the more possible combinations. AES-256 means 2^256 possible keys, a number with 78 digits. Brute-forcing it is infeasible with current and any foreseeable technology, including practical quantum computing.

What does GCM add?

GCM (Galois/Counter Mode) is the mode of operation. It defines how AES is applied to long data and, crucially, adds authentication:

• Confidentiality: nobody without the key can read the content.
• Integrity: change a single byte of the ciphertext and decryption fails. You can't slip tampered data past us.

For a password manager this is critical: we need passwords to be hidden and impossible to silently alter.

How is AES-256-GCM used in a zero-knowledge manager?

1. Your master password goes through PBKDF2 with hundreds of thousands of iterations to derive a strong key (KEK).
2. The KEK wraps (encrypts) a random vault key (DEK) with AES-256-GCM.
3. Each credential in your vault is encrypted with the DEK using AES-256-GCM, with a unique random nonce per entry.
4. The server only sees those encrypted blobs.

Is AES-256-GCM really unbreakable?

In practice, yes. Breaches in password managers haven't come from breaking AES, but from:

• Weak or reused master passwords.
• Implementation mistakes (e.g. reusing nonces).
• Phishing the user.

That's why the provider matters: well-implemented AES-256-GCM plus a strong master password is today's gold standard.

What about quantum computing?

AES-256 is reasonably resistant to known quantum attacks (Grover's algorithm effectively reduces it to "128 bits", which is still huge). For data encrypted today with AES-256-GCM, there's no realistic quantum threat in the short or medium term.

AES-256-GCM at Lock Down Keys

At Lock Down Keys we use client-side AES-256-GCM for every vault entry, with PBKDF2 derivation from your master password and unique random nonces. To see the full architecture, read what zero-knowledge means.