Argon2 Password Hash Generator (Argon2id)
The password-hashing competition winner, memory-hard.
Free · no sign-up · runs locally·
About this tool
Argon2 won the 2015 Password Hashing Competition and is the current recommendation (OWASP, RFC 9106) for storing passwords. Its key strength is being memory-hard: each hash forces the attacker to fill a large block of RAM, which neutralizes the GPU and ASIC farms that make fast hashes like SHA-256 useless for passwords.
This tool runs Argon2 through the audited @noble/hashes library, entirely in your browser. Argon2id (the recommended default) blends resistance to both side-channel and GPU attacks. Tune iterations (t), memory in KiB (m), and parallelism (p); the output is a standard PHC-format string you can store and verify.
Like everything on encrypt.tools, this runs entirely in your browser — nothing you enter is transmitted or stored.
Do the same in a terminal
Reproduce or cross-check this tool with standard command-line utilities. For deterministic operations like hashing and encoding, the output matches exactly.
$ printf 'correct horse battery staple' | argon2 pepper-free-salt -id -t 2 -k 19456 -p 1 -l 32 -e
$argon2id$v=19$m=19456,t=2,p=1$cGVwcGVyLWZyZWUtc2FsdA$lPcgsmHYK3WDaSWfvRMBw7k4nzggT3pkOBenX1/wiN8Frequently asked questions about Argon2 Hasher
Which Argon2 variant should I use?+
Argon2id is the recommended default — it combines Argon2i's resistance to side-channel attacks with Argon2d's resistance to GPU cracking. Use Argon2i only if you specifically need side-channel resistance and Argon2d only for cryptocurrencies that require it.
What parameters are safe for password storage?+
OWASP suggests Argon2id with at least 19 MiB of memory (m=19456), 2 iterations, and parallelism 1 as a floor, increasing memory as your hardware allows. This tool defaults to 64 MiB and 3 iterations.
Why is Argon2 better than bcrypt for passwords?+
Both are slow by design, but Argon2 is also memory-hard, meaning attackers can't cheaply parallelize cracking on GPUs. bcrypt uses a fixed small amount of memory. Argon2id is the modern first choice; bcrypt remains a solid, widely-supported option.
Encoding vs Encryption vs Hashing: The Difference, With Examples
Encoding, encryption and hashing all turn data into gibberish, but only one keeps secrets. Learn the difference with real Base64, AES and SHA-256 examples and when to use each.
6 MIN READKDF · PASSWORDSArgon2id vs bcrypt vs scrypt vs PBKDF2: Password Hashing in 2026
Which password hashing algorithm should you use? A practical comparison of Argon2id, bcrypt, scrypt and PBKDF2 with OWASP-recommended parameters, hash formats, pitfalls and migration steps.
6 MIN READRANDOMNESS · PASSWORDSPassword Entropy Explained: How Strong Is Your Password, Really?
How password strength is actually measured: the entropy formula, a crack-time table for random passwords and passphrases, why human-chosen passwords score far lower, and current NIST rules.
6 MIN READRelated tools
PBKDF2 Derivation
Derive keys from passwords with salt and iterations
BCRYPT · COSTBcrypt Hasher
Hash and verify passwords with the bcrypt standard
SCRYPT · N/r/pScrypt Calculator
Memory-hard key derivation with tunable N, r, p
NTLM · WINDOWSNTLM Hasher
The MD4-based hash Windows stores for local accounts