Shiklo Tools
PDF40
Image20
Calculators & Converters25
Text & Writing13
Developer26
Video14
Audio14
Document14
Data & Spreadsheet12
Web & SEO9
OCR & Scanning5
Archive & File12
Security & Privacy23
Health & Medical29
QR & Barcode5

Argon2 Hash Generator

Hash passwords with Argon2id, Argon2i or Argon2d — memory, iterations and parallelism adjustable — and verify encoded $argon2 hashes.

Argon2 won the Password Hashing Competition and is the algorithm security experts recommend for storing passwords today. Its Argon2id variant, standardised in RFC 9106, is designed to be expensive in memory as well as time, which makes large-scale password cracking with graphics cards and custom chips far more costly than with older hashes. Libraries for PHP, Python, Node.js, Java, Go, Rust and .NET produce and check the same encoded hashes.

This tool creates Argon2id, Argon2i or Argon2d hashes with the memory, iterations, parallelism and length you choose — with OWASP and RFC 9106 settings one click away — and checks a password against an existing encoded $argon2 hash. It runs hash-wasm, a WebAssembly implementation, in your browser, so the password never leaves your device.

How to use Argon2 Hash Generator

  1. Choose Create a hash or Check a password.
  2. Type the password.
  3. To hash: choose a preset or set memory, iterations and parallelism, then press Hash password.
  4. To check: paste the encoded hash and press Check password.

Features

  • Argon2id (recommended), Argon2i and Argon2d.
  • Presets: OWASP, RFC 9106 low-memory and a strong setting.
  • Memory up to 1 GiB, iterations, parallelism and hash length.
  • Random 16-byte salt, included in the encoded hash.
  • Verifies $argon2id$, $argon2i$ and $argon2d$ hashes.
  • WebAssembly in your browser; nothing is sent.

Choosing the settings

Argon2 has three cost settings. Memory is the most important: the more memory each guess needs, the fewer guesses an attacker can run in parallel. Iterations multiply the time, and parallelism lets the work use several processor cores.

PresetMemoryIterationsParallelism
OWASP minimum19 MiB21
RFC 9106 low memory64 MiB34
Strong256 MiB44

Reading an encoded Argon2 hash

An encoded hash such as $argon2id$v=19$m=19456,t=2,p=1$salt$hash carries everything needed to check a password later: the variant, the version (19 is the current 1.3), the memory in kibibytes, the iterations, the parallelism, then the salt and the hash in Base64. Because the settings travel with the hash, you can raise them for new passwords while old hashes keep working, and rehash each password the next time its owner logs in.

Argon2id, Argon2i or Argon2d?

Argon2id combines the other two and is the right choice for passwords — RFC 9106 recommends it as the default. Argon2i resists side-channel timing attacks but is weaker against cracking hardware; Argon2d is the reverse. Use Argon2i or Argon2d only when a system you must stay compatible with already uses them.

Memory on your device

Hashing allocates the chosen memory in the browser for a moment. Phones and older computers may not have room for very high settings; if hashing fails, lower the memory. The time shown gives a rough idea of the cost, but measure on your own server before choosing settings for production, aiming for a fraction of a second per login.

Use it safely

The password is processed on your device and never stored or sent. For live systems, generate hashes with your application's own library. To compare with older algorithms, see the Bcrypt Generator and the PBKDF2 Generator; to create strong passwords, use the Password Generator.

Frequently asked questions

Can I use the hash with PHP's password_verify?

Yes. PHP's password_hash with PASSWORD_ARGON2ID produces and checks the same encoded format.

What does m=19456 mean in a hash?

The memory in kibibytes: 19,456 KiB is 19 MiB.

How long should hashing take?

On a server, a fraction of a second per login is a common target; raise memory before iterations.

How do I generate an Argon2 hash?

Type the password, choose a preset or your own settings, and press Hash password.

Which Argon2 variant should I use?

Argon2id, the variant recommended by RFC 9106 and OWASP.

What settings does OWASP recommend?

At least 19 MiB of memory, 2 iterations and parallelism 1 for Argon2id.

How do I verify a password against an Argon2 hash?

Choose Check a password, type the password, paste the hash and press Check password.

Why is the hash different each time?

A new random salt is used each time; all of them verify correctly.

Is my password sent anywhere?

No. Hashing runs in your browser.

Why did hashing fail?

The device may not have enough memory for the settings — lower the memory.

Related tools