You have used AES encryption today. Probably hundreds of times, without noticing. Every time you loaded a secure website, joined a Wi-Fi network, or unlocked a phone with an encrypted drive, AES was very likely doing the work in the background. It is the most widely used encryption standard in the world, and yet most people who rely on it could not say what the three letters stand for. So let us fix that, in plain terms, without needing a maths degree.
AES stands for Advanced Encryption Standard. It is a method for scrambling data so that only someone with the right key can turn it back into something readable. The United States government held a public competition to choose it, and in 2001 a design originally called Rijndael won. It has been the default workhorse of digital security ever since.
What encryption does, in one picture
Encryption takes readable data, called plaintext, and runs it through a process that turns it into scrambled nonsense, called ciphertext. The process uses a key, which is essentially a very large secret number. Anyone with the key can reverse the process and read the data. Anyone without it sees noise.
AES is what is known as a symmetric cipher, which means the same key both locks and unlocks the data. That makes it fast and efficient, which is exactly why it is used for bulk work like encrypting an entire hard drive or a live stream of web traffic. The trade-off is that both sides need to share that one key safely, a problem other parts of a security system solve.
What AES-256 actually means
You will often see AES written with a number after it: AES-128, AES-192, or AES-256. That number is the length of the key in bits. A longer key means more possible keys an attacker would have to guess, and the count grows astronomically with each step up.
- AES-128 has roughly 340 undecillion possible keys. That is a 39-digit number. It is considered secure for almost everything.
- AES-256 squares that difficulty again, to a number with about 78 digits. It is the choice when you want the widest possible safety margin, and it is approved for protecting classified information.
To put the scale in perspective: trying every possible AES-128 key by brute force would take far longer than the age of the universe using all the computers on Earth combined. AES-256 is not meaningfully more breakable than AES-128 in any practical sense; both are already past the point of brute force being realistic. The bigger key is more about future-proofing and meeting strict standards than about plugging a real weakness.
Is AES actually secure?
As ciphers go, AES is about as trusted as they come. It has been studied relentlessly by cryptographers around the world for more than two decades, and no practical attack against properly implemented AES has been found. The only general way in is brute force, trying every key, and as we just covered, that is hopeless even for the shorter key sizes.
The catch: the cipher is almost never the weak point. Real breaches happen around AES, not through it. A weak or reused password that protects the key, a flaw in the software, a key left sitting in memory, or a stolen device that was never locked. These are where things go wrong. AES being strong does not save you if the key is easy to guess or carelessly stored. Strong encryption is necessary, but it is only one part of a secure system.
What about quantum computers?
You may have heard that quantum computers will break encryption. For AES, the threat is modest. The best known quantum approach effectively halves the key strength, so AES-256 would behave roughly like AES-128 does today, which is still far out of reach. Quantum computing is a genuine concern for some older public-key systems, but symmetric ciphers like AES are expected to hold up well, especially at 256 bits.
Where you rely on AES every day
Once you know what to look for, AES is everywhere. A short, non-exhaustive list of places it is quietly at work:
- Secure websites. Most HTTPS connections use AES to encrypt the actual data flowing between your browser and the site, once the connection is set up.
- Wi-Fi. Modern Wi-Fi security (WPA2 and WPA3) uses AES to keep nearby devices from reading your traffic.
- Disk encryption. BitLocker on Windows and FileVault on Mac use AES to scramble everything on your drive, so a lost laptop is not a data leak.
- Password managers and messaging apps. The vault that holds your passwords, and many encrypted chat apps, lean on AES to protect what is inside.
This is why modern processors include dedicated instructions just for AES. It is run so often that chips are built to do it quickly, which is part of why you never notice the cost.
AES is the lock, not the whole security system
One distinction gets misread constantly. Knowing that something “uses AES-256” tells you the lock is strong. It does not tell you who holds the key. A cloud service can encrypt your data with AES and still keep a copy of the key on its own servers, which means the company, or anyone who breaches it, can read your data. The cipher is doing its job; the design just is not in your favour.
That is the difference between AES as a cipher and a privacy design like end-to-end encryption, where the key lives only on your devices and no server in the middle can read your data. End-to-end encryption usually uses a strong cipher underneath, but the important part is who controls the key. For a sense of how a leaky clipboard fits into all this, our overview of whether your clipboard is a security risk walks through what can read your copies and why readable data is the real danger.
A concrete example: Relic does not actually use AES. It encrypts your clipboard history on your device with XChaCha20-Poly1305, a modern authenticated cipher trusted for the same jobs, before anything is saved or synced. The specifics are laid out in how Relic encrypts your clipboard history.
If you want to see encryption work on something small, you can paste a sentence into a free text encryptor, set a password, and watch it turn into ciphertext. Send the result to someone, share the password through a different channel, and you have done end-to-end encryption by hand. The maths underneath is the same idea AES brings to nearly everything you do online.
Frequently asked questions
Is AES-256 better than AES-128?
AES-256 uses a longer key, so there are more possible keys an attacker would have to try. Both are considered secure against any realistic brute-force attack today, and AES-128 is plenty for most uses. AES-256 is the common choice when you want a wider margin or need to meet a standard that requires it, such as handling classified data.
Can AES encryption be cracked?
There is no known practical way to break properly used AES. The only general attack is trying every possible key, which is infeasible even for AES-128 with current and foreseeable computers. Real-world failures almost never come from breaking AES itself. They come from weak passwords, poor key handling, or bugs in the software around it.
Is AES the same as end-to-end encryption?
No. AES is a cipher, the maths that turns readable data into scrambled data with a key. End-to-end encryption is a design that decides who holds the keys, namely you and the person you are talking to, and nobody in the middle. End-to-end encryption usually uses a cipher like AES underneath, but the two answer different questions.