Argon2 Playground
Compute Argon2id, Argon2i or Argon2d hashes with your own memory, iterations, parallelism, salt and secret. PHC string output and verification.
19 MiB of memory
Keyed hashing (the K input of Argon2). It is not stored in the encoded string, so you need it again to verify.
Argon2 (RFC 9106) won the Password Hashing Competition. Argon2id is the recommended variant; OWASP minimum: m=19 MiB, t=2, p=1. Computed with hash-wasm (WebAssembly) in your browser.
Verify a password against a hash
Runs entirely in your browser. Your data is never uploaded.
What is Argon2id Playground?
Hash a password with Argon2 (RFC 9106), the winner of the Password Hashing Competition, and control every parameter: variant, iterations, memory, parallelism, hash length, salt encoding and an optional secret key. The result is shown as raw hex and as a standard PHC string.
How to use Argon2id Playground
- Enter the Password and choose the Variant (Argon2id is recommended).
- Set Iterations (t), Memory (KiB), Parallelism (p) and Hash length.
- Enter a Salt in text, hex or Base64, or leave it empty for a random 16-byte salt.
- Click Hash; copy the encoded string or the raw hex and verify it in the panel below.
Example
Password password, salt somesalt (text), Argon2id, t=2, m=65536, p=1, 32 bytes
$argon2id$v=19$m=65536,t=2,p=1$c29tZXNhbHQ$CTFhFdXPJO1aFaMaO6Mm5c8y7cJHAph8ArZWb2GRPPc
Same result as the reference argon2 CLI and argon2-cffi.
When to use Argon2id Playground
Use it to tune parameters, reproduce reference vectors or debug Argon2 hashes from libraries such as libsodium, argon2-cffi or PHP's password_hash. High memory settings may be slow or fail on phones.
How Argon2id Playground works
Argon2 fills m KiB of memory with blocks derived from BLAKE2b, then makes t passes over that memory: data-dependent addressing for Argon2d, data-independent for Argon2i, and a hybrid for Argon2id. The output is encoded as $argon2id$v=19$m=…,t=…,p=…$<salt>$<hash> with unpadded Base64. Computation uses hash-wasm (WebAssembly) in your browser; the optional secret is the keyed-hashing input K and is not included in the string.
Common Use Cases
- Choosing memory and iteration settings for a server
- Reproducing Argon2 test vectors
- Verifying PHC strings produced by another library
- Teaching how Argon2 parameters affect cost
FAQs
What parameters does OWASP recommend?
Argon2id with at least m=19 MiB, t=2, p=1, or equivalent trade-offs such as m=46 MiB, t=1, p=1.
Argon2id, Argon2i or Argon2d?
Argon2id for password hashing. Argon2d is vulnerable to side-channel attacks and Argon2i is weaker against GPU trade-off attacks.
Does parallelism make it faster here?
No. The browser computes lanes sequentially, but the parameter still changes the result, so it must match the value your server uses.