Scrypt Hash Generator

Generate scrypt password hashes locally

Scrypt is a memory-hard function used both as a password hash and as a key derivation function (KDF). This tool runs entirely in your browser and produces a PHC-encoded string ($scrypt$ln=...,r=...,p=...$salt$digest) for storage and verification with Scrypt Verify.

Scrypt itself (RFC 7914) outputs raw key material. The PHC string is a common packaging format that embeds ln (log₂ N), r, p, salt, and digest so verify can check a password from one string. Prefer Argon2id for new password-storage designs when you are not tied to scrypt. To derive Hex/Base64 key bytes without PHC packaging, use the Scrypt KDF tool.

How to use this scrypt generator

1. Enter the password in the Input panel.
2. Choose cost N (1024–1048576), block size r, parallelism p, and hash length.
3. Click Hash.
4. Copy the PHC hash for storage or verification.

Parameters and browser limits

• N is selected from powers of two between 1024 and 1048576. Default is 16384. The settings panel shows estimated memory as you change N, r, and p.
• r is the block size (commonly 8).
• p is parallelism.
• Estimated memory follows the implementation allocation ≈ 128·r·(N + p + 2) bytes. High N or r values can strain or crash a browser tab even in a worker. With default r = 8, N = 1048576 needs on the order of 1 GiB.

Frequently asked questions

Is the PHC string the only scrypt format?

No. Many systems store a raw digest with separate salt and parameters. For raw Hex/Base64 key material, use Scrypt KDF. The PHC form on this page is for convenient verify-with-one-string workflows.

Can I decrypt a scrypt hash?

No. Scrypt is one-way. Use Scrypt Verify to check a candidate password against a PHC string.