Name Code FPE protects identifiers without breaking their format.
It is an FF1 AES-256 format-preserving encryption tool for reversible, server-safe identifiers. It transforms names, usernames, codes, and structured values into protected outputs that remain practical to store, copy, compare, and use inside real workflows.
With the same key and the same encryption settings, a protected value can be decrypted back to the exact original input.
Format-preserving encryption protects data while keeping the encrypted output inside a usable format. Instead of producing long binary or Base64-style ciphertext, it can keep protected values compatible with forms, databases, filenames, labels, and operational systems.
What does FF1 AES-256 mean?
FF1 is a NIST-specified method for format-preserving encryption. AES-256 means the encryption is built on the Advanced Encryption Standard using a 256-bit cryptographic key. Together, FF1 and AES-256 provide reversible protection for identifiers while preserving a practical output format.
Reversible by design
Encryption and decryption are deterministic under the same conditions. When the same key, alphabet or domain, tweak, and algorithm settings are used, the encrypted value returns to the exact original input.
Designed for controlled identifier workflows
Name Code FPE is suitable for names and usernames, internal codes, pseudonymized labels, workflow data, and controlled test values that must remain practical while being cryptographically protected.
References: NIST SP 800-38G for FF1 format-preserving encryption and NIST FIPS 197 for the Advanced Encryption Standard.