Scrypt Hash Generator

Generate scrypt password hashes locally

Scrypt is a memory-hard function used both as a password hash and as a key derivation function (KDF). This tool runs entirely in your browser and produces:

1. A PHC-encoded string ($scrypt$ln=...,r=...,p=...$salt$digest) for storage and verification
2. A raw digest shown as Hex or Base64 for KDF-style use

Scrypt itself (RFC 7914) outputs raw key material. The PHC string is a common packaging format that embeds ln (log₂ N), r, p, salt, and digest so Scrypt Verify can check a password from one string. Prefer Argon2id for new password-storage designs when you are not tied to scrypt.

How to use this scrypt generator

1. Enter the password in the Input panel.
2. Choose cost N (1024–1048576), block size r, parallelism p, and hash length.
3. Choose Digest output encoding (Hex or Base64).
4. Click Hash.
5. Copy the PHC hash for verification, or the digest when you need raw derived bytes.

Parameters and browser limits

• N is selected from powers of two between 1024 and 1048576. Default is 16384. The settings panel shows estimated memory as you change N, r, and p.
• r is the block size (commonly 8).
• p is parallelism.
• Estimated memory follows the implementation allocation ≈ 128·r·(N + p + 2) bytes. High N or r values can strain or crash a browser tab even in a worker. With default r = 8, N = 1048576 needs on the order of 1 GiB.

Frequently asked questions

Is the PHC string the only scrypt format?

No. Many systems store a raw digest with separate salt and parameters. This tool also shows the raw digest. The PHC form is for convenient verify-with-one-string workflows.

Can I decrypt a scrypt hash?

No. Scrypt is one-way. Use Scrypt Verify to check a candidate password against a PHC string.