PBKDF2 Key Derivation Tool
Derive keys from passwords with salt and iterations.
About this tool
PBKDF2 stretches a password into a key by iterating an HMAC thousands of times, making brute-force proportionally expensive. It backs WPA2, older password managers, and the AES tool on this site.
OWASP currently recommends at least 600,000 iterations of PBKDF2-HMAC-SHA-256 for password storage. Configure salt (text or hex), iterations, and output length; derivation happens locally via the Web Crypto API.
Like everything on encrypt.tools, this runs entirely in your browser — nothing you enter is transmitted or stored.
Frequently asked questions about PBKDF2 Derivation
How many iterations should I use?+
OWASP recommends at least 600,000 iterations for PBKDF2-HMAC-SHA-256 for password storage in 2026. More iterations mean more work for attackers — and for you.
What is the salt for?+
A unique random salt per password ensures identical passwords produce different keys and defeats precomputed rainbow-table attacks. Never reuse a salt.
Is PBKDF2 still recommended?+
It's acceptable and widely supported, but Argon2 and scrypt are memory-hard and resist GPU cracking better. Prefer them for new password-storage designs.
Related tools
Argon2 Hasher
The password-hashing competition winner, memory-hard
BCRYPT · COSTBcrypt Hasher
Hash and verify passwords with the bcrypt standard
SCRYPT · N/r/pScrypt Calculator
Memory-hard key derivation with tunable N, r, p
NTLM · WINDOWSNTLM Hasher
The MD4-based hash Windows stores for local accounts