PBKDF2 hash tool

Set a password, pick the parameters, then generate.

PBKDF2 is the weakest of the dedicated password hashers: it has no memory cost, so graphics cards guess fast. A derived key is not encryption either. For new password storage, Argon2id or bcrypt hold up better. Passwords past 1,024 characters and salts past 2,048 are refused here.

The hash string format is defined by this page, because WebCrypto returns raw bytes and the PBKDF2 strings in the wild each pick their own layout: $pbkdf2-<digest>$i=<iterations>$<salt base64>$<derived key base64>. Anything this page generates verifies on this page, and the salt travels inside the string.