🔐 encrypt.toolsALL TOOLS
ARGON2 · MEMORY-HARD

Argon2 Password Hash Generator (Argon2id)

The password-hashing competition winner, memory-hard.

loading tool…
FIELD NOTES

About this tool

Argon2 won the 2015 Password Hashing Competition and is the current recommendation (OWASP, RFC 9106) for storing passwords. Its key strength is being memory-hard: each hash forces the attacker to fill a large block of RAM, which neutralizes the GPU and ASIC farms that make fast hashes like SHA-256 useless for passwords.

This tool runs Argon2 through the audited @noble/hashes library, entirely in your browser. Argon2id (the recommended default) blends resistance to both side-channel and GPU attacks. Tune iterations (t), memory in KiB (m), and parallelism (p); the output is a standard PHC-format string you can store and verify.

Like everything on encrypt.tools, this runs entirely in your browser — nothing you enter is transmitted or stored.

FREQUENTLY ASKED

Frequently asked questions about Argon2 Hasher

Which Argon2 variant should I use?+

Argon2id is the recommended default — it combines Argon2i's resistance to side-channel attacks with Argon2d's resistance to GPU cracking. Use Argon2i only if you specifically need side-channel resistance and Argon2d only for cryptocurrencies that require it.

What parameters are safe for password storage?+

OWASP suggests Argon2id with at least 19 MiB of memory (m=19456), 2 iterations, and parallelism 1 as a floor, increasing memory as your hardware allows. This tool defaults to 64 MiB and 3 iterations.

Why is Argon2 better than bcrypt for passwords?+

Both are slow by design, but Argon2 is also memory-hard, meaning attackers can't cheaply parallelize cracking on GPUs. bcrypt uses a fixed small amount of memory. Argon2id is the modern first choice; bcrypt remains a solid, widely-supported option.

RELATED INSTRUMENTS