KDF Hash Generator Online | PBKDF2, Argon2 & Scrypt Key Derivation

This tool implements three modern Key Derivation Functions — PBKDF2, Argon2id, and Scrypt — using the @noble/hashes library, an audited pure-JavaScript cryptographic suite. Each algorithm serves different security and compatibility needs; Argon2id is recommended for new projects. All computation runs entirely in your browser, making it safe for learning and testing reference values.

KDF Algorithm Selection

Code Examples

Derive keys programmatically using well-audited libraries:

// JavaScript (@noble/hashes)
import { pbkdf2 } from '@noble/hashes/pbkdf2';
import { sha256 } from '@noble/hashes/sha256';

const key = pbkdf2(sha256, 'password', 'salt', { c: 600000, dkLen: 32 });
console.log(Buffer.from(key).toString('hex'));

# Python (libsodium via PyNaCl)
import nacl.pwhash

hashed = nacl.pwhash.str(
    b'mypassword',
    opslimit=nacl.pwhash.argon2id.OPSLIMIT_INTERACTIVE,
    memlimit=nacl.pwhash.argon2id.MEMLIMIT_INTERACTIVE
)

Security Notes

• Argon2id for new projects — winner of the Password Hashing Competition, resists both GPU and side-channel attacks.
• Use OWASP 2024 parameters as baseline — click the preset button to auto-fill recommended iterations/memory/parallelism.
• Salt must be unique per password — never reuse salts; 16 bytes (128 bits) minimum, generated via crypto.getRandomValues.
• Production: run server-side — this tool is for learning and testing; use libsodium or Bouncy Castle in production.

Related Tools

Need to verify the strength of your derived key? The Password Strength Checker scores it on a 0-4 scale. For raw SHA hashing without key derivation, try the SHA Hash Generator. To generate the initial password, the Password Generator creates cryptographically secure random strings.