Argon2 Hash Generator
Online Argon2 password hash generator supporting argon2i, argon2d and argon2id with adjustable memory, iteration and parallelism parameters, plus built-in verification. Output follows the PHC string format.
FreeOnline Tool
Loading…
How to Use
- Enter the password you want to hash.
- Choose an Argon2 variant (argon2id is recommended).
- Set the memory cost, iteration count and parallelism parameters.
- Click Generate to obtain the Argon2 hash string.
- Use the verification feature to check whether a password matches a hash.
Features
- Supports all three variants: argon2i, argon2d and argon2id, with argon2id recommended
- Memory, iteration and parallelism parameters are all adjustable
- Built-in password verification
- Output conforms to the PHC string format and is compatible with mainstream frameworks
- Computed locally, so passwords never leave the browser
Use Cases
Password storage for a new system
Choose argon2id for password storage in a new web application to get stronger GPU brute-force resistance than bcrypt or PBKDF2.
Evaluating a hashing upgrade
Assess whether to migrate from MD5 or SHA by tuning parameters here and testing how they perform on your target hardware.
Security compliance checks
Frameworks such as GDPR and ISO 27001 require appropriate password protection, and Argon2 meets current security standards.
Teaching password hashing
Demonstrate how a memory-hard function resists GPU attacks to help developers understand modern password security practice.
FAQ
Is Argon2 more secure than bcrypt?
Argon2 won the 2015 Password Hashing Competition and is considered one of the strongest password hashing algorithms available. It resists GPU and ASIC brute-force attacks by consuming substantial memory rather than CPU alone, a property bcrypt lacks.
Should I choose argon2i, argon2d or argon2id?
Use argon2id. It combines argon2i's resistance to side-channel attacks with argon2d's resistance to GPU attacks, making it the best general-purpose choice.
What memory value should I set?
OWASP recommends at least 12 MB (12288 KiB), and higher is better where server memory allows. More memory raises the cost of parallel cracking for an attacker.
Are Argon2 hashes portable across languages?
Yes. Argon2 uses the standard PHC string format, which embeds the algorithm parameters and salt, so libraries in different languages such as Node.js argon2, Python argon2-cffi and PHP password_hash can all parse it.