Argon2 Hash Generator

Generate Argon2 password hashes locally

Argon2 is a memory-hard password hashing function and the winner of the Password Hashing Competition. It is intended for storing passwords safely. It is not a general checksum like MD5 or SHA, and it is not encryption: an Argon2 hash cannot be decrypted back into the original password.

This tool runs entirely in your browser. Choose Argon2id, Argon2i, or Argon2d, set memory, iterations, parallelism, and hash length, then generate a PHC-encoded hash for storage and verification, plus a raw digest in Hex or Base64 for KDF-style use.

Argon2id is the default and the usual recommendation for password storage. Prefer Bcrypt only when you need compatibility with an existing bcrypt-based system.

How to use this Argon2 generator

1. Enter the password in the Input panel.
2. Select the mode. Argon2id is recommended for most password-hashing uses.
3. Adjust memory size (KiB), iterations, parallelism, and hash length if needed.
4. Click Hash.
5. Copy the encoded hash, then verify it with the Argon2 Verify tool when needed.

Parameters and browser limits

• Memory (m) controls how much RAM the hash uses, in kibibytes. Larger values resist GPU and ASIC guessing more strongly.
• Iterations (t) repeats the memory-hard pass. Each increase costs more CPU time.
• Parallelism (p) sets the number of lanes. Keep it modest in a browser.
• Hash length is the derived digest size in bytes, commonly 32.

Defaults follow a common interactive OWASP-style profile: 19456 KiB memory, 2 iterations, parallelism 1, and a 32-byte digest. High memory or iteration values can still strain or crash a browser tab because WASM must allocate large linear memory even when hashing runs in a worker. This page caps memory at 262144 KiB (256 MiB).

Frequently asked questions

Is Argon2 the same as hashing a file with SHA-256?

No. SHA-family digests are fast checksums or general cryptographic hashes. Argon2 is intentionally slow and memory-hard password hashing for password storage and verification.

Can I decrypt an Argon2 hash?

No. Argon2 is one-way. You can only check whether a candidate password matches an existing hash with a verify step.

What is the difference between Argon2id, Argon2i, and Argon2d?

They share the same parameters but differ in how they access memory. Argon2d is faster and data-dependent, Argon2i is side-channel resistant and data-independent, and Argon2id mixes both. For password hashing, Argon2id is the usual default.

Why does the generated hash start with $argon2id$?

That PHC encoded string identifies the mode and embeds v, m, t, p, salt, and digest. The Argon2 Verify tool accepts $argon2id$, $argon2i$, and $argon2d$ hashes with version 19.

Example with low parameters

For password password, salt somesalt, memory 16, iterations 2, parallelism 1, and a 32-byte digest, Argon2id produces:

$argon2id$v=19$m=16,t=2,p=1$c29tZXNhbHQ$BYICwHI82IwkQIzKwcv4KN7mO884Q6FQ6jZKHgtOH/g

This page generates a fresh random salt on each Hash, so normal outputs will not match that fixed example.