# Argon2 Password Hash Generator

Generate Argon2id password hashes with tunable memory, iterations, parallelism, salt length, and PHC output

> Canonical page: https://elysiatools.com/en/tools/argon2-password-hash-generator

- **Category:** Security

- **Keywords:** argon2, argon2id, password hash, phc, kdf, owasp

## Overview

The Argon2 Password Hash Generator allows you to securely hash plaintext passwords using the Argon2id algorithm. You can customize key cryptographic parameters including memory cost, iterations, parallelism, salt length, and hash length to generate standard PHC-formatted strings suitable for modern database storage and authentication systems.

## Inputs

- **Password** (textarea): Enter plaintext password for hashing
- **Memory (KiB)** (number)
- **Iterations** (number)
- **Parallelism** (number)
- **Salt Length** (number)
- **Hash Length** (number)

## When to use

- When implementing secure user authentication systems that require OWASP-recommended Argon2id password hashing.
- When testing or verifying backend password verification logic with custom Argon2 parameters.
- When generating secure, salt-based cryptographic hashes for configuration files or database seeding.

## How it works

- Enter the plaintext password you want to hash in the input field.
- Configure the Argon2 parameters such as memory (KiB), iterations, parallelism, salt length, and hash length.
- Generate the hash to output the standard PHC string format containing the algorithm parameters, salt, and hash.

## Use cases

- Generating secure password hashes for database seeding scripts during development.
- Creating Argon2id hashes for configuration files in applications that use PHC strings for admin authentication.
- Testing how different memory and iteration parameters affect the generated hash structure.

## Frequently asked questions

### What is Argon2id?

Argon2id is a hybrid version of the Argon2 hashing algorithm that provides resistance against both GPU side-channel attacks and memory-hard optimization attacks.

### What is a PHC string format?

A PHC string is a standardized format for representing password hashes, containing the algorithm name, parameters (like memory and iterations), salt, and the hash itself in a single string.

### What are the recommended OWASP settings for Argon2id?

OWASP recommends a minimum of 19,456 KiB of memory, 3 iterations, and a parallelism factor of 1.

### Can I customize the salt length?

Yes, you can adjust the salt length between 8 and 64 bytes to meet your specific security requirements.

### Is the hashing performed securely?

Yes, the hashing is computed locally in your browser, ensuring your plaintext passwords are never sent to a remote server.

## Related tools

- [BIP39 Mnemonic Phrase Generator](https://elysiatools.com/en/tools/mnemonic-bip39-generator): Generate or validate 12 to 24 word BIP39 mnemonic phrases with entropy and PBKDF2-HMAC-SHA512 seed output
- [PKCE Code Verifier & Challenge Generator](https://elysiatools.com/en/tools/pkce-code-verifier-generator): Generate, validate and verify OAuth2 / OIDC PKCE (RFC 7636) code_verifier and S256 code_challenge pairs. Three modes: (1) generate a fresh verifier + challenge from cryptographically secure random bytes at 256/384/512/768-bit entropy, (2) audit a verifier you already have against the RFC — length (43–128), charset \[A-Za-z0-9-._~\] and ≥256-bit entropy, and (3) verify a verifier/challenge pair by recomputing BASE64URL(SHA256(verifier)). Optionally build the full authorization-request URL and token-exchange body. Complements the generic nonce-generator (which only emits a verifier+challenge pair) with RFC-compliance auditing and pair verification.
- [SSH Key Pair Generator](https://elysiatools.com/en/tools/ssh-key-generator): Generate an SSH key pair (Ed25519 recommended, RSA 4096, or ECDSA P-256) with an OpenSSH-format public key ready for ~/.ssh/authorized_keys, a SHA256 fingerprint, and a PEM private key. Optional passphrase encryption. Runs locally.
- [TOTP / HOTP Offline Code Generator](https://elysiatools.com/en/tools/totp-hotp-offline-generator): Generate RFC 6238 TOTP (time-based, 6/8 digits, 30/60s step) and RFC 4226 HOTP (counter-based) one-time passwords from a base32 shared secret, fully offline with HMAC-SHA1/256/512, plus an otpauth:// URI for importing into Google Authenticator / Authy
- [Hash Generator](https://elysiatools.com/en/tools/hash-generator): Generate hash values (MD5, SHA1, SHA256, SHA512)
- [HMAC Generator & Verifier](https://elysiatools.com/en/tools/hmac-generator-verifier): Compute an HMAC message-authentication signature over a message + shared secret using SHA-1/SHA-2/SHA-3/BLAKE2, or verify an incoming signature against the secret — with webhook presets for Stripe / Slack / GitHub and constant-time comparison
- [Bcrypt Generator](https://elysiatools.com/en/tools/bcrypt-generator): Generate bcrypt hash from password
- [Markdown Table Generator](https://elysiatools.com/en/tools/markdown-table-generator): Generate formatted Markdown tables from CSV, JSON, or array data with alignment, header styles, width control, and merge hints

## Samples

- [Strong Password Samples](https://elysiatools.com/en/samples/strong-password): Collection of passwords with varying strength levels for testing password validation
- [Android Image Processing Java Samples](https://elysiatools.com/en/samples/android-image-processing-java): Android Java image processing examples including reading/saving images, scaling, and format conversion
- [Android Image Processing Kotlin Samples](https://elysiatools.com/en/samples/android-image-processing-kotlin): Android Kotlin image processing examples including reading/saving images, scaling, and format conversion
- [Web Image Processing Python Samples](https://elysiatools.com/en/samples/web-image-processing-python): Web Python image processing examples using PIL/Pillow including reading, saving, resizing, and format conversion