Argon2id Argon2i Argon2d

Complete Argon2 utility

Hash passwords, verify PHC strings, inspect parameters, check rehash needs, derive raw keys and benchmark your server.

Create Argon2 password hash

Creates a PHC formatted hash for password storage.

The password is sent only to this server for the requested operation and is never written to logs.
Apply a known parameter set, then fine tune if needed.
Argon2id is the general recommendation for password storage. Argon2d requires helper support.
Auto chooses the most compatible engine for the selected settings.
Memory used for each hash. Higher values increase resistance and server memory usage.
Number of passes over memory.
Number of lanes or threads used by Argon2.
PHC tag length. PHP Password API uses 32 bytes.
Advanced salt settings
Defines how a manually entered salt is decoded.
Leave empty for a secure random salt. Manual salt requires the helper engine.
Run a tool to see the result.

Verify password against PHC hash

Safely checks whether a password matches an Argon2 PHC string.

The password is sent only to this server for the requested operation and is never written to logs.
The PHC string includes variant, version, cost parameters, salt and tag.
Run a tool to see the result.

Check whether a hash needs rehashing

Compare an existing PHC hash with a target policy. Enter the password to optionally create a replacement hash.

The PHC string includes variant, version, cost parameters, salt and tag.
If provided, the tool verifies it first and creates a replacement hash only when needed.
Apply a known parameter set, then fine tune if needed.
Argon2id is the general recommendation for password storage. Argon2d requires helper support.
KiB
Number of passes over memory.
Number of lanes or threads used by Argon2.
bytes
Run a tool to see the result.

Inspect Argon2 PHC string

Decode the public metadata stored inside a PHC formatted Argon2 hash.

Inspection does not require the password and does not attempt to crack or reverse the hash.
Run a tool to see the result.

Derive a raw key with Argon2

Produces raw key bytes for cryptographic workflows. This is different from a password database PHC hash.

The password is sent only to this server for the requested operation and is never written to logs.
Apply a known parameter set, then fine tune if needed.
Argon2id is the general recommendation for password storage. Argon2d requires helper support.
Defines how the salt input is decoded to bytes.
A unique salt is required. Generate one or provide the exact bytes your protocol specifies.
KiB
Number of passes over memory.
Number of lanes or threads used by Argon2.
bytes
Controls how the derived binary key is displayed.
Run a tool to see the result.

Batch password hashing

Hash multiple passwords with one parameter set. Each line gets its own random salt.

Empty lines are ignored. The server applies a configurable item limit to protect NAS resources.
Apply a known parameter set, then fine tune if needed.
Argon2id is the general recommendation for password storage. Argon2d requires helper support.
KiB
Number of passes over memory.
Number of lanes or threads used by Argon2.
bytes
Run a tool to see the result.

Benchmark Argon2 settings on this server

Measure actual execution time before selecting production password parameters.

Benchmarking intentionally consumes CPU and memory. Run counts and parameter limits are capped by the server configuration.
Apply a known parameter set, then fine tune if needed.
Argon2id is the general recommendation for password storage. Argon2d requires helper support.
KiB
Number of passes over memory.
Number of lanes or threads used by Argon2.
bytes
Multiple runs give a more useful average. The server enforces a maximum.
Run a tool to see the result.

Server capability and limits

Shows what this deployment can actually execute before you choose an engine or variant.

Argon2