0
0

Argon2 KDF

Egor VolchenkoEgor Volchenko
CreatedNov 3, 2026
UpdatedNov 3, 2026

This Argon2 KDF form currently generates a salted Argon2id password hash rather than raw derived key bytes. Use it to inspect the encoded hash format or prepare a password-verification fixture. The salt, work-factor, length, and output-format controls do not change the fixed profile used by this operation.

1
Iterations / Work Factor
Key Length (Bytes)
Output Format:
Live

How to use Argon2 KDF

Use the following steps to process a small test input.

Generate an encoded Argon2id hash

  1. Type a non-sensitive test password into Input text. Select UTF-8 under Input Encoding: for ordinary text, or select Hex or Base64 for encoded input bytes.
  2. Salt (Optional / Auto-generated), Iterations / Work Factor, and Key Length (Bytes) are visible, but their submitted values are ignored. Leave these shared fields at their defaults.
  3. Turn Auto / Live off and click Derive Key for one sample. With Auto / Live on, edits request fresh salted hashes.
  4. Read Argon2 KDF Hash Result. Hex (lower), Hex (UPPER), and Base64 do not change this encoded password-hash output.
  5. Click Copy to copy the result. Use Clear where shown, or the field clear controls, to remove the text.

For UTF-8 input password, one verified result is $argon2id$v=19$m=65536,t=4,p=1$QX4WM6TWM8/L8aFWeNE5Dw$s8re0XRXzofpY0eaTtVKAw5MZ6w02Y/EfDamKQUzMm4. A new request uses a new random salt, so its complete result should differ.

A rejected request may leave an earlier result visible. Clear the fields and recheck the input before relying on a new calculation.

Read the Argon2id profile

The encoded string identifies Argon2id version 19 with m=65536,t=4,p=1: 65,536 KiB of memory, four passes, and one lane. It packages a random 16-byte salt and a 32-byte hash. These settings describe this implementation; they are not adjustable through the displayed fields.

Separate password hashes from raw key material

A PHC password-hash string includes algorithm and parameter information. It is not a 32-byte encryption key, even though it contains a 32-byte hash. The current form has no raw-output mode, selectable Argon2 variant, memory control, or parallelism control.

Frequently asked questions

The current operation returns an encoded Argon2id password hash. Do not pass the entire PHC string to a cipher as though it were raw key material. This form does not expose raw derivation output.

Egor Volchenko
Egor Volchenko Developer & Author

Hi! I’m a WordPress developer with over 10 years of experience. I love Tailwind CSS, clean code, and intuitive interfaces. I’m currently working on million.tools — a service with convenient online tools for everyday tasks. I’m building it from scratch with great attention to detail and user experience.

Published:
Updated:

Ratings & feedback 0

Share your experience with this tool.

Leave feedback

Your rating (optional)

Select a rating

Write a review, leave a rating, or do both.

Your email stays private.

No feedback yet

Be the first to leave a review or rating.