Your files stay on your device

# PBKDF2 hash tool

PBKDF2 derivation with your salt, iterations, and digest, plus verification of a pasted hash, through WebCrypto.
PasswordSaltBlank means 16 random bytes are made for youSalt is encoded asPlain textHexBase64

Set a password, pick the parameters, then generate.

PBKDF2 is the weakest of the dedicated password hashers: it has no memory cost, so graphics cards guess fast. A derived key is not encryption either. For new password storage, [Argon2id](/crypto/argon2) or [bcrypt](/crypto/bcrypt) hold up better. Passwords past 1,024 characters and salts past 2,048 are refused here.

The hash string format is defined by this page, because WebCrypto returns raw bytes and the PBKDF2 strings in the wild each pick their own layout: $pbkdf2-<digest>$i=<iterations>$<salt base64>$<derived key base64>. Anything this page generates verifies on this page, and the salt travels inside the string.
OptionsGenerate a hash

## More hashing & encryption tools

- [Argon2id hasher](/crypto/argon2)
- [bcrypt](/crypto/bcrypt)
- [HKDF deriver](/crypto/hkdf)
[All hashing & encryption tools](/crypto)

Was this tool useful?
YesNo

---

Canonical HTML: https://nutter.tools/crypto/pbkdf2-hash-generator-verifier
Markdown version: https://nutter.tools/crypto/pbkdf2-hash-generator-verifier.md
Plain-text version: https://nutter.tools/crypto/pbkdf2-hash-generator-verifier.txt
Agent index: https://nutter.tools/llms.txt