PBKDF2 Hash Generator
Generate a real PBKDF2 hash using your browser's native Web Crypto API - configurable iterations and hash algorithm.
Enter a password, salt, and iteration count - this tool uses your browser's built-in Web Crypto API to compute a real PBKDF2 derived key.
Computed using your browser's native Web Crypto API (SubtleCrypto.deriveBits) - a real, standards-compliant PBKDF2 derivation, not a simulated result. Your password is never transmitted anywhere.
PBKDF2 is the algorithm behind Django's default password hasher and is widely used elsewhere - see the Django Password Hash Generator for Django's exact output format.
What Is PBKDF2?
PBKDF2 (Password-Based Key Derivation Function 2) repeatedly applies a hash function (commonly SHA-256) to a password combined with a salt, a configurable number of times - the repetition ("iterations") is what makes brute-forcing slower, similar in spirit to bcrypt's cost factor.
Why Use This Tool?
PBKDF2 is natively supported by browsers' Web Crypto API, so this tool computes a real, standards-compliant derived key with no external library needed - useful for testing or understanding PBKDF2 output for your own application.
How to Use It
- Enter a password and a salt (or generate a random one).
- Choose the iteration count and hash algorithm (SHA-256 or SHA-512).
- Click Generate - a real PBKDF2 key is derived using the Web Crypto API.
- Copy the resulting hex-encoded derived key.
Understanding the Output
Unlike bcrypt/Argon2, PBKDF2 itself doesn't define a single standard "self-contained" string format - different systems (Django, ASP.NET, etc.) package the salt/iterations/hash together differently. This tool shows the raw derived key plus the parameters used, so you can format them however your target system expects.