Argon2 Password Hash Generator

Generate Argon2id password hashes with tunable memory, iterations, parallelism, salt length, and PHC output

Example Results

1 examples

Generate an OWASP-style Argon2id PHC string

Tune memory and iteration cost, then export the final encoded Argon2id hash for backend configuration.

{
  "algorithm": "argon2id",
  "phc": "$argon2id$..."
}
View input parameters
{ "password": "correct horse battery staple", "memoryKiB": 19456, "iterations": 3, "parallelism": 1, "saltLength": 16, "hashLength": 32 }

Key Facts

Category
Security & Validation
Input Types
textarea, number
Output Type
json
Sample Coverage
1
API Ready
Yes

Overview

The Argon2 Password Hash Generator allows you to securely hash plaintext passwords using the Argon2id algorithm. You can customize key cryptographic parameters including memory cost, iterations, parallelism, salt length, and hash length to generate standard PHC-formatted strings suitable for modern database storage and authentication systems.

When to Use

  • When implementing secure user authentication systems that require OWASP-recommended Argon2id password hashing.
  • When testing or verifying backend password verification logic with custom Argon2 parameters.
  • When generating secure, salt-based cryptographic hashes for configuration files or database seeding.

How It Works

  • Enter the plaintext password you want to hash in the input field.
  • Configure the Argon2 parameters such as memory (KiB), iterations, parallelism, salt length, and hash length.
  • Generate the hash to output the standard PHC string format containing the algorithm parameters, salt, and hash.

Use Cases

Generating secure password hashes for database seeding scripts during development.
Creating Argon2id hashes for configuration files in applications that use PHC strings for admin authentication.
Testing how different memory and iteration parameters affect the generated hash structure.

Examples

1. Generate OWASP-Compliant Argon2id Hash

Backend Developer
Background
A developer needs to seed a test database with a secure admin user password using OWASP-recommended Argon2id parameters.
Problem
Generating a secure, standard PHC string for the password 'correct horse battery staple' with 19456 KiB memory and 3 iterations.
How to Use
Input the password, set Memory to 19456, Iterations to 3, Parallelism to 1, and click generate.
Example Config
Password: 'correct horse battery staple', Memory: 19456 KiB, Iterations: 3, Parallelism: 1, Salt Length: 16, Hash Length: 32
Outcome
A JSON response containing the algorithm 'argon2id' and the formatted PHC string starting with '$argon2id$'.

2. High-Memory Argon2id Hash Generation

Security Engineer
Background
An engineer is configuring a high-security internal portal and wants to use a higher memory parameter to resist brute-force attacks.
Problem
Generating a hash with 65536 KiB memory and 4 iterations for a master password.
How to Use
Enter the master password, adjust the Memory field to 65536, set Iterations to 4, and generate the hash.
Example Config
Password: 'super-secure-master-key', Memory: 65536 KiB, Iterations: 4, Parallelism: 2, Salt Length: 16, Hash Length: 32
Outcome
A PHC string encoded with the custom memory parameter (m=65536) and iteration count (t=4) for backend verification.

Try with Samples

hash

Related Hubs

FAQ

What is Argon2id?

Argon2id is a hybrid version of the Argon2 hashing algorithm that provides resistance against both GPU side-channel attacks and memory-hard optimization attacks.

What is a PHC string format?

A PHC string is a standardized format for representing password hashes, containing the algorithm name, parameters (like memory and iterations), salt, and the hash itself in a single string.

What are the recommended OWASP settings for Argon2id?

OWASP recommends a minimum of 19,456 KiB of memory, 3 iterations, and a parallelism factor of 1.

Can I customize the salt length?

Yes, you can adjust the salt length between 8 and 64 bytes to meet your specific security requirements.

Is the hashing performed securely?

Yes, the hashing is computed locally in your browser, ensuring your plaintext passwords are never sent to a remote server.

API Documentation

Request Endpoint

POST /en/api/tools/argon2-password-hash-generator

Request Parameters

Parameter Name Type Required Description
password textarea Yes -
memoryKiB number Yes -
iterations number Yes -
parallelism number Yes -
saltLength number Yes -
hashLength number Yes -

Response Format

{
  "key": {...},
  "metadata": {
    "key": "value"
  },
  "error": "Error message (optional)",
  "message": "Notification message (optional)"
}
JSON Data: JSON Data

AI MCP Documentation

Add this tool to your MCP server configuration:

{
  "mcpServers": {
    "elysiatools-argon2-password-hash-generator": {
      "name": "argon2-password-hash-generator",
      "description": "Generate Argon2id password hashes with tunable memory, iterations, parallelism, salt length, and PHC output",
      "baseUrl": "https://elysiatools.com/mcp/sse?toolId=argon2-password-hash-generator",
      "command": "",
      "args": [],
      "env": {},
      "isActive": true,
      "type": "sse"
    }
  }
}

You can chain multiple tools, e.g.: `https://elysiatools.com/mcp/sse?toolId=png-to-webp,jpg-to-webp,gif-to-webp`, max 20 tools.

If you encounter any issues, please contact us at [email protected]