Argon2 Online Hash Generator

Report a Problem
Argon2id is the preferred choice for password storage. Argon2i is intended for special cases requiring side-channel resistance, while Argon2d is not suitable for general password storage.
Presets are only common starting points. Tune the parameters based on the target server’s CPU, memory, and login concurrency; they are not absolute security standards.
Memory = memory used by one hash; iterations = number of computation passes; parallelism should generally not exceed the number of available CPU threads.
Above 256 MB, the browser may fail due to insufficient memory. Test these settings directly on the server.
Random passwords are generated using the browser CSPRNG and are intended for parameter testing only. Do not use them for real accounts.
Browser-local Calculation
Run the calculation repeatedly with the current parameters and use the average time to help select parameters suitable for the target environment.
Benchmark results only represent the current device and browser. Measure actual server performance in the target environment.
Verification reads the parameters stored in the hash, recalculates the hash, and compares the results. No new hash is generated.
Paste a PHC-format hash to read the algorithm, version, and all parameters. Everything is processed offline.
Password hashing is one-way and irreversible; there is no “decryption”. This tool only performs hashing, verification, and parameter parsing.
Privacy Notice：All calculations are performed locally in the browser using WebAssembly. Passwords and hashes are never uploaded or stored.

Argon2id/i/d with configurable memory, iterations, and parallelism, plus PHC verification, parsing, and benchmarking

Argon2 Online Hash Generator

Argon2 won the password hashing competition and is a preferred choice for new password storage systems. It uses both time and memory costs to make brute-force attacks with GPUs and specialized hardware more difficult. The tool provides separate modes for generating, verifying, and parsing hashes.

Argon2 Variants

Argon2id is the recommended variant for password storage. Argon2i is intended for special scenarios requiring resistance to side-channel attacks. Argon2d is not recommended for general password storage.

Presets

The recommended preset uses 64MB of memory, t=3, and p=2. The high-security preset uses 128MB, t=3, and p=4. The low-resource preset uses 32MB, t=2, and p=1. All parameters can also be configured manually.

Parameter Meanings

The main parameters are memory, iterations, and parallelism. The p value should not exceed the number of available CPU threads on the server. Presets are starting points; final parameters should be tested against the target server CPU, memory, and login concurrency.

Generate

Generation produces a standard PHC-format string containing the algorithm, version, m, t, p, salt, and hash body. The result can be stored directly in a database. The password can be shown or hidden, and a random test password can also be generated.

Verify

Enter an existing Argon2 hash and a password to verify it. The tool reads the parameters stored in the hash and recomputes the result for comparison. It reports whether the values match and does not generate a new hash.

Parse

Parse mode reads the algorithm, version, memory, iterations, parallelism, salt, and hash body from the PHC string.

Benchmark

The benchmark runs the current parameters repeatedly and reports average, minimum, and maximum processing times, along with tuning suggestions. The result represents only the current device and browser; the production server should be tested separately.

Validation

Memory is validated from 1 to 1024MB, iterations from 1 to 100, and parallelism from 1 to 16. Above 256MB, a warning is shown because the browser may run out of memory. Malformed PHC strings or missing salt or hash values show the reason for the error. If computation fails, reducing memory or iterations is recommended. There is no server-side fallback.

Use Cases

Useful for choosing a password hashing method for new projects, migrating from MD5, SHA, or bcrypt, inspecting the strength of existing PHC strings, and learning about memory-hard password hashing.

Privacy

Hashing is irreversible. The tool only performs calculation, verification, and parsing. Everything runs locally through WebAssembly; passwords are neither uploaded nor stored. If the local engine is unavailable, an error is reported instead of falling back to server-side processing.

Generate, verify, and parse Argon2 password hashes online

Argon2 is the winning algorithm of the password hashing competition. By combining memory, iterations, and parallelism, it increases both time and memory costs to make brute-force attacks using GPUs and specialized hardware more difficult.
  • Three variants: Argon2id is recommended for password storage, Argon2i is intended for side-channel-resistant scenarios, and Argon2d is not recommended for general password storage
  • Three parameter presets: recommended 64MB t=3 p=2, high security 128MB t=3 p=4, and low resource 32MB t=2 p=1; fully custom parameters are also supported
  • Parameter validation: memory 1–1024MB, iterations 1–100, and parallelism 1–16; above 256MB the browser may warn about insufficient memory
  • Generates standard PHC-format hashes that can be stored directly in a database
  • Verification recalculates using the parameters recorded in the hash; parsing displays the algorithm, version, memory, iterations, parallelism, salt, and hash
  • Benchmarking provides average processing time and tuning suggestions to help select parameters for the target server
Suitable for selecting password hashing parameters for new projects, migrating from legacy password schemes, and checking existing PHC strings. Computation runs locally in the browser through WebAssembly, passwords are never uploaded, and there is no server-side fallback when the local engine is unavailable.
Similar tools
Comments 0
No comments yet. Be the first to comment!
avatar
Comment content cannot be empty
0/255