MuleSoft Secure Properties Generator

Yes. This tool is 100% client-side. Your key and data never leave your browser memory. Everything happens locally via the Web Crypto API.

MuleSoft's Secure Properties Provider uses this syntax to identify which values need decryption at runtime. The wrapper is mandatory for secure property files.

For modern Mule 4 apps, AES (CBC or ECB) is highly recommended. For older Mule 3 apps, Blowfish or DES might be required.

Current batch processing supports standard key-value pairs. For complex YAML with anchors/aliases, we recommend processing individual values or the whole file.

Using Random IV (Initialization Vector) means encrypting the same text with the same key will produce a different ciphertext each time. This increases security by preventing attackers from identifying repeated patterns. Decryption is still successful because the IV is stored along with the ciphertext in the output.

Yes! Click the Save / Load button next to the Security Key input. You can save your key, algorithm, mode, and Random IV setting under a custom name (e.g., "Prod AES" or "Dev Project") for instant 1-click loading in future sessions. All saved profiles are stored strictly in your browser's localStorage—never uploaded, synced, or sent to any server.

Yes! Switch to the File Content tab. When encrypting, the tool automatically scans your property keys and values, encrypts all secret values, and wraps them in ![...] while preserving your comments and formatting. When decrypting, it automatically detects all ![encrypted] patterns in your file and decrypts them in-place.

The plain copy button () copies only the raw Base64 encrypted string. The wrapped copy button (![]) automatically adds MuleSoft's required ![encrypted_value] syntax around the string, making it ready to paste directly into your .yaml or .properties files.

Clicking the dice icon () next to the Key input instantly generates a strong, random security key. For protection against shoulder surfing, clicking the eye icon reveals your key as plain text, and the tool will automatically re-mask it back to a password field after 5 seconds.