Security & Authentication Tools
Generate strong passwords and real password hashes - bcrypt, Argon2, PBKDF2, Scrypt - including framework-specific formats for Laravel, Django, and more.
14 tools in this category
All Categories
Strong Passwords and Real Password Hashes
These tools cover both sides of passwords: creating ones that are hard to guess, and storing them safely in an application. Password generation happens in your browser using its cryptographically secure random source.
Create a password with the Secure Password Generator and see how strong a given length and character set is with the Password Entropy Calculator.
Hashes for Developers
Applications should store passwords only as slow, salted hashes. Generate test hashes with the Bcrypt, Argon2 (Argon2id, Argon2i, Argon2d), PBKDF2 and Scrypt generators - useful for seeding a test database or checking that your code verifies hashes correctly.
Frameworks store hashes in their own formats, so there are dedicated generators for PHP password_hash() and Laravel, Django and ASP.NET. Node.js (bcrypt) and Ruby on Rails (has_secure_password) use standard bcrypt, so the Bcrypt Generator covers them. For password-protecting a folder on Apache or Nginx, the Htpasswd Generator writes the file entry.
Our guide to creating strong passwords covers the habits that matter most.