Security & Authentication Tools

Argon2 Hash Generator

Generate a real Argon2id, Argon2i or Argon2d password hash in your browser - the Password Hashing Competition winner, with configurable memory, iterations and parallelism.

Choose Argon2id, Argon2i or Argon2d, set the memory, time and parallelism parameters, and get the standard PHC hash string - computed in your browser.

Password Variant

Memory Cost (KB)

Time Cost (iterations)

Parallelism

Computed using a real Argon2 WebAssembly implementation running entirely in your browser - your password is never transmitted anywhere. Higher memory/time settings take longer and use more browser memory.

More Security & Authentication Tools

View all 14

Bcrypt Hash Generator PBKDF2 Hash Generator Password Entropy Calculator Scrypt Hash Generator Secure Password Generator PHP Password Hash Generator Password Strength Checker Django Password Hash Generator

Argon2id is the variant OWASP recommends and what PHP's password_hash() uses with PASSWORD_ARGON2ID - choose it unless a system requires another variant.

What Is Argon2?

Argon2 won the 2015 Password Hashing Competition and is a current best-practice choice for password hashing. It is memory-hard - deliberately expensive in RAM as well as time - which makes brute-force attacks on GPUs and custom hardware much more costly.

Argon2id, Argon2i or Argon2d?

Argon2id - a hybrid of the other two, resistant to both side-channel and GPU attacks. OWASP recommends it for password storage, and it is the default here.
Argon2i - optimised against side-channel timing attacks; use it only when a system specifically requires it.
Argon2d - strongest against GPU cracking but vulnerable to side-channel attacks, so it is meant for cryptocurrencies and proof-of-work, not passwords.

How to Use It

Enter a password and choose the variant.
Set memory cost (KB), time cost (iterations) and parallelism.
Click Generate - a real Argon2 hash is computed in your browser.
Copy the resulting hash string.

Understanding the Output

The output follows the standard PHC string format, for example $argon2id$v=19$m=19456,t=2,p=1$salt$hash. It records the variant and every parameter, so PHP's password_verify(), Laravel's Hash::check() and other Argon2 libraries can verify it directly.

Frequently Asked Questions

For password storage OWASP recommends Argon2id. Argon2i is resistant to side-channel attacks but weaker against GPU cracking than Argon2id.

Memory is how much RAM each hash uses, iterations is how many passes are made, and parallelism is the number of threads. Higher memory makes GPU attacks much more expensive.

No. The hash is computed in your browser, so the password never leaves your device.