Argon2 Hash Generator & Verifier

Generate Argon2id or Argon2i password hashes with configurable memory, iterations, and parallelism. The modern standard for password hashing.

1 MiB 128 MiB
1 6
1 2

Enter a password and click Generate to create an Argon2 hash

About Argon2

Argon2 is the winner of the 2015 Password Hashing Competition (PHC). It's designed to be memory-hard, making it extremely resistant to GPU and ASIC-based brute-force attacks. Unlike older algorithms like bcrypt that are compute-hard only, Argon2 requires significant memory, which dramatically increases the cost of parallel attacks.

Argon2 vs Bcrypt

FeatureArgon2idBcrypt
Memory-hardYesNo (4KB only)
GPU resistantExcellentModerate
Side-channel safeYes (Argon2id)Yes
Max input length1,024 bytes in this demo72 bytes
StandardRFC 9106 (2021)1999

Parameters Available in This Demo

These limits apply to this hosted tool. For a production application, choose settings using RFC 9106 and measure performance on your own hardware. The displayed execution time is a measurement of one request.

Memory Cost

1–128 MiB

Memory allocated to the calculation.

Iterations

1–6 passes

Passes over the allocated memory.

Parallelism

1–2 lanes

Parallel work lanes used by Argon2.

Frequently Asked Questions

What is Argon2?
Argon2 is a password hashing algorithm that won the Password Hashing Competition in 2015. It is designed to be resistant to GPU and ASIC attacks through configurable memory usage.
What is the difference between Argon2i and Argon2id?
Argon2i is optimized for resistance to side-channel attacks. Argon2id is a hybrid that provides both side-channel resistance and GPU attack resistance. Argon2id is recommended for most use cases.
What parameters should I use?
OWASP recommends Argon2id with 64 MB memory, 3 iterations, and 1 thread as a minimum. Increase memory and iterations for higher security.
Is Argon2 better than bcrypt?
Argon2 is considered more modern and flexible. It allows tuning memory usage independently from CPU cost, making it more resistant to specialized hardware attacks. However, bcrypt remains secure and widely supported.
Is my password stored?
Your password is sent to the server only for hashing and is immediately discarded. We do not log or store any data.