Developer ToolsGeneratorsFree Tool
Password Hash Generator
Compute a real PBKDF2-SHA256 password hash with 100,000 iterations — a genuine key-derivation function suitable for password storage, not a bare fast hash.
How to Use Password Hash Generator
- 1Enter your password
- 2Optionally add a line with --- then a salt (hex or text) to reproduce a previous hash
- 3Click Process
- 4Copy the resulting pbkdf2$sha256$... hash, including the salt shown
Frequently Asked Questions
It's real PBKDF2 (Password-Based Key Derivation Function 2) via the Web Crypto API, run for 100,000 iterations — specifically designed to be slow, which is what makes a password hash resistant to brute-force attacks. This is a genuine key-derivation function, not a single fast SHA-256 pass.
It's within commonly recommended ranges for PBKDF2-SHA256 (recent OWASP guidance suggests 600,000+ for new systems) — for production, consider an even higher iteration count or a memory-hard algorithm like Argon2 or bcrypt if available in your stack.
If you don't provide one, a random 16-byte salt is generated and shown in the output (as hex) — save it, since you'll need the exact same salt to reproduce the same hash later (e.g. for verifying a login). You can also supply your own salt as hex or plain text.
No — the entire PBKDF2 computation runs locally in your browser via the Web Crypto API; nothing is transmitted.
Related Tools
UUID Generator v4
Generate a random RFC 4122 version 4 UUID with the version and variant bits set correctly.
UUID Generator v1
Generate a real RFC 4122 version 1 (time-based) UUID, encoding the current timestamp plus a randomly-generated node identifier.
NanoID Generator
Generate a cryptographically random, URL-friendly ID using the same 21-character length and default alphabet as the popular nanoid library.
ULID Generator
Generate a real, spec-compliant ULID — a 26-character, lexicographically sortable ID with a Crockford base32-encoded timestamp and random suffix.