Password Hash Generator

Enter a password and pick an algorithm to get its hash.

Which algorithm to choose

• bcrypt is the standard for PHP (password_hash) and most frameworks;
• Argon2id is recommended by OWASP and RFC 9106;
• SHA-512-crypt produces the string format for /etc/shadow in Linux;
• Django PBKDF2 is the format Django uses to store passwords by default.

Why the hash is different every time

A random salt is baked into the hash, so the same password produces different strings. Verification reads the salt and the parameters from the hash string itself, the same way password_verify does in PHP.

bcrypt only takes the first 72 bytes of the password. If yours is longer, a warning appears under the field.