🧂 TEXT
Password Hasher
Hash passwords to SHA-256, scrypt, and PBKDF2 hex lines, locally in your browser.
Your files are processed directly on your device and are not uploaded to our servers.
Password & salt
How to use
- Type your password and generate a random salt (or paste your own hex salt).
- Pick scrypt cost and PBKDF2 iterations, then click Hash password.
- Copy the SHA-256, scrypt, and PBKDF2 hex lines into your config or database.
FAQ
- Is my password uploaded anywhere?
- No. All three hashes are computed on your device with a dependency-free implementation in your browser. Your password, salt, and hashes never leave this page.
- What is the difference between SHA-256, scrypt, and PBKDF2?
- SHA-256 is a fast general-purpose hash — fine for checksums, but too fast to store passwords safely on its own. scrypt and PBKDF2 are password-hashing functions: they mix in a salt and repeat work thousands of times so stolen hashes are expensive to crack. For real password storage, use scrypt or PBKDF2 with a unique random salt per password.
- Why do I need a salt?
- A salt is random data mixed into the hash so identical passwords produce different hashes. It defeats rainbow-table lookups. Generate a fresh random salt for every password — never reuse one.
- Which parameters should I choose?
- Higher cost means slower cracking: scrypt N=16384 and PBKDF2 210,000 iterations are solid modern defaults. Lower values hash faster on weak devices. The cost shown in milliseconds is measured on your own device.