Scrypt Key Derivation & Hash Calculator
Memory-hard key derivation with tunable N, r, p.
About this tool
Scrypt (2009) pioneered memory-hard key derivation — the idea that a good password hash should demand lots of RAM, not just CPU time, to defeat custom cracking hardware. It powers Litecoin's proof-of-work and many password systems, and directly inspired Argon2.
This tool runs scrypt via the audited @noble/hashes library in your browser. Tune the cost parameters: N (CPU/memory cost, a power of two), r (block size), and p (parallelism). The result is available as hex and Base64.
Like everything on encrypt.tools, this runs entirely in your browser — nothing you enter is transmitted or stored.
Frequently asked questions about Scrypt Calculator
What do N, r, and p mean in scrypt?+
N is the CPU/memory cost factor and must be a power of two — higher means more memory and time. r is the block size (memory per unit), and p is parallelism. Memory used is roughly 128 × N × r bytes. Common interactive settings are N=16384, r=8, p=1.
Is scrypt or Argon2 better?+
Argon2 is newer and won the Password Hashing Competition, with more flexible memory tuning; it is the current first recommendation. Scrypt is older, well-tested, and still perfectly acceptable, especially where it's already deployed.
Why must N be a power of two?+
Scrypt's internal algorithm indexes into a memory array using bit masking, which requires the array size (driven by N) to be a power of two. The tool will reject non-power-of-two values.
Related tools
PBKDF2 Derivation
Derive keys from passwords with salt and iterations
ARGON2 · MEMORY-HARDArgon2 Hasher
The password-hashing competition winner, memory-hard
BCRYPT · COSTBcrypt Hasher
Hash and verify passwords with the bcrypt standard
NTLM · WINDOWSNTLM Hasher
The MD4-based hash Windows stores for local accounts