Argon2 Hash Generator & Verifier
Generate Argon2id, Argon2i or Argon2d PHC strings and verify version 19 hashes with bounded browser memory.
A complete PHC string
Generate produces $argon2id$, $argon2i$ or $argon2d$ output with v=19, memory m, iterations t, parallelism p, salt and hash. Verify takes those values from the encoded string, checks their sizes before allocating memory and returns matches=true or false. Version 16 hashes are not accepted.
The default Argon2id configuration uses 65536 KiB (64 MiB), t=3, p=4, 32 output bytes and a random 16-byte salt. KiB means 1024 bytes. The parallelism parameter affects the result even when execution uses a single Worker.
Reproducible input and bounded work
Passwords use UTF-8 without trimming or normalization, including the empty string. A custom hex salt must have 8–64 bytes. The pinned hash-wasm engine handles normal inputs; the existing noble-hashes implementation handles the valid empty-password case that the WASM wrapper rejects. Both are checked against independent vectors.
Memory is capped at 262144 KiB and must be at least 8×p; t is 1–10 and p is 1–8. The product m×t cannot exceed 786432. Output is 4–64 bytes. Cancellation or the 30-second timeout terminates the Worker. Production settings still need application-specific benchmarking.
Reference
Questions & answers
Which variant is selected by default?
Argon2id. Other variants are available for reproducing systems and test vectors; the page does not claim they are interchangeable.
Is the output a reversible encryption?
No. Argon2 is used for password hashing or key derivation. Verification requires a candidate password.
Is my input uploaded?
No. Processing runs in your browser. Engines load from this site; the tool does not send input to a processing API or save it. Clear removes the visible input and result.