Password Hash Generator

Q: What is a password hash?

A password hash is a one-way cryptographic transformation of a password into a fixed-length string. Unlike encryption, hashing cannot be reversed. When users log in, the system hashes their input and compares it to the stored hash, never storing the actual password.

Q: Which hashing algorithm should I use?

For new applications, use Argon2id - it's the winner of the Password Hashing Competition and provides the best security. bcrypt is also excellent and widely supported. Avoid MD5 and SHA-1 for password storage as they're too fast and vulnerable to brute-force attacks.

Q: What is a salt in password hashing?

A salt is random data added to a password before hashing to ensure identical passwords produce different hashes. This prevents rainbow table attacks and makes it impossible for attackers to precompute hash tables. Each password should have a unique salt.

Q: Why is MD5 not recommended for passwords?

MD5 is a fast hash function designed for checksums, not password storage. Its speed makes it vulnerable to brute-force attacks - modern GPUs can compute billions of MD5 hashes per second. Additionally, MD5 has known collision vulnerabilities. Use Argon2, bcrypt, or scrypt instead.

Pick an algorithm—Argon2, bcrypt, SHA-256, and more—then generate a hash. Everything runs locally in your browser.

Select Algorithm

Modern (Recommended)

Argon2id Best

Memory-hard, PHC winner

bcrypt Recommended

Battle-tested, widely supported

scrypt Recommended

Memory-hard, configurable

PBKDF2 Legacy

SHA-256/512, NIST approved

SHA Family

SHA-256 Fast Hash

256-bit secure hash

SHA-512 Fast Hash

512-bit secure hash

SHA-384 Fast Hash

384-bit truncated SHA-512

SHA-1 Deprecated

Legacy, collision vulnerable

Legacy (Not for Passwords)

MD5 Insecure

For checksums only

Password Input

Enter Password

Enter a password to check strength

Algorithm Parameters

Memory (MiB) Default: 64 MiB

Iterations (t) Default: 3

Parallelism (p) Default: 4

Salt Configuration

Salt Length (bytes)

Output Encoding

Generated Hash

Hash Output:

Click "Generate Hash" to create a password hash

JSON Output:

Understanding Password Hashing

Password hashing is a critical security practice that converts passwords into irreversible, fixed-length strings. Unlike encryption, hashing is a one-way function - you cannot recover the original password from its hash. This tool runs entirely in your browser, ensuring your passwords are never transmitted over the network.

Algorithm Comparison

Algorithm	Security Level	Best For	Notes
Argon2id	Excellent	New applications	PHC winner, memory-hard
bcrypt	Excellent	General use	Widely supported, proven
scrypt	Excellent	High security	Memory-hard, used by cryptocurrencies
PBKDF2	Good	Legacy systems	NIST approved, not memory-hard
SHA-256/512	Moderate	Checksums, HMACs	Too fast for password storage
MD5	Poor	Checksums only	Broken, never use for passwords

Password Hash Generator

Select Algorithm

Password Input

Algorithm Parameters

Salt Configuration

Generated Hash

Hash Details

Verify Password Against Hash

Verification Result

Understanding Password Hashing

Algorithm Comparison

Frequently Asked Questions

What is a password hash?

Which hashing algorithm should I use?

What is a salt in password hashing?

Why is MD5 not recommended for passwords?

Is my password sent to your server?