Triple DES Encrypt / Decrypt
Encrypt and decrypt data with Triple DES (3DES) using double or triple key lengths
How to use Triple DES Encrypt / Decrypt
Enter your data and key
Type or paste the text to encrypt or decrypt and provide your Triple DES key (16 or 24 characters for double or triple key).
Select mode and key configuration
Choose CBC or another mode of operation, and select whether to use double-key (2TDEA) or triple-key (3TDEA) configuration.
Click Encrypt or Decrypt
The result appears instantly in your browser.
Copy the output
Click Copy to use the encrypted or decrypted value.
Operation
What is Triple DES (3DES) encryption?
Triple DES (3DES or TDEA) applies the DES algorithm three times to each block of data, using two or three independent keys. This multiplies the effective key length to 112 or 168 bits, making it significantly more resistant to brute-force attacks than single DES. Triple DES was widely used in banking, payment systems, and financial cryptography.
While more secure than DES, Triple DES is much slower than AES and was officially deprecated by NIST in 2023. It is provided here for legacy compatibility. Use AES-256 for all new encryption requirements.
Triple DES was the bridge between DES and AES. When DES was recognized as too weak in the 1990s, applying the algorithm three times with independent keys was the quickest path to stronger encryption without deploying an entirely new cipher. The banking industry adopted 3DES extensively — the EMV specification for chip-and-PIN cards, the DUKPT (Derived Unique Key Per Transaction) protocol for point-of-sale terminals, and the ANSI X9.17 key management standard all rely on Triple DES. Many of these systems remain operational today because replacing hardware in millions of ATMs and payment terminals is a multi-year undertaking.
The Sweet32 attack (2016) demonstrated a practical vulnerability in Triple DES and other 64-bit block ciphers when large volumes of data are encrypted under the same key. After approximately 2^32 blocks (about 32 GB), birthday-bound collisions become likely, potentially leaking plaintext. This vulnerability, combined with 3DES being three times slower than AES, led NIST to formally deprecate Triple DES in 2023 (NIST SP 800-131A Rev. 2). For encrypting new data, AES-256 is the recommended replacement, providing stronger security and significantly better performance on all modern hardware.
Frequently asked questions
What is the difference between 2-key and 3-key Triple DES?
2-key Triple DES (2TDEA) uses two DES keys applied as Encrypt-Decrypt-Encrypt, providing 112 bits of effective security. 3-key Triple DES (3TDEA) uses three independent keys for 168 bits of effective security but is slower.
Is Triple DES still secure?
Triple DES was deprecated by NIST in 2023 and is not recommended for new applications. It remains in use in legacy banking and payment systems (EMV cards, ATMs) that cannot easily be updated to AES.
Why was AES chosen over Triple DES?
AES was selected in 2001 specifically to replace 3DES. AES is faster in both hardware and software, supports longer key sizes (128, 192, 256 bits), and was designed from scratch using modern cryptographic knowledge.
Do ATMs and credit card terminals still use Triple DES?
Some do. EMV chip cards and ATM PIN encryption widely adopted 3DES-based key management. However, the payment industry is actively migrating to AES. New payment terminals and key injection systems are required to support AES.
What is the Sweet32 attack against Triple DES?
Sweet32 exploits the birthday paradox on 64-bit block ciphers like Triple DES. After encrypting about 32 GB of data under the same key, block collisions become likely, allowing an attacker to recover plaintext from HTTPS traffic. The attack was demonstrated in 2016 against HTTPS connections using 3DES cipher suites, and led to 3DES being removed from TLS 1.3 and deprecated for all new applications.
Should I migrate from Triple DES to AES?
Yes. NIST deprecated Triple DES in 2023 and recommends AES for all symmetric encryption. AES-128 already provides stronger security than 3-key Triple DES (168-bit nominal but 112-bit effective due to meet-in-the-middle attacks), and AES-256 provides an even larger security margin. AES is also 3-5x faster than Triple DES in software and benefits from hardware acceleration (AES-NI instructions) on modern processors.
Related tools
JSON Formatter
Format, validate, and prettify JSON data online for API debugging and code review
Base64 Encoder
Encode and decode Base64 strings and files for APIs, emails, and data URIs
URL Encoder
Encode and decode URL components online for safe query strings and API parameters
Hash Generator
Generate MD5, SHA-256, SHA-512, BLAKE3, and 25+ cryptographic hashes to verify file integrity
Regex Tester
Test and debug regular expressions online with live matching and capture groups