This question already has an answer here:
I want to decrease attack surface by preventing the plaintext string or encryption key from ever being typed or otherwise entered into a computer. Ideally the decryption key would be something that the user can generate and store in their head. But encryption should still be as strong as possible. I don't need to be able to decrypt without a computer, though that would be cool.