There is no upload endpoint — your files are processed in this browser tab. Open your network tab and check. See how it stays private.
How to hash a password
- Enter a password. Type or paste the plaintext to hash.
- Choose an algorithm. Pick Argon2id (recommended) or bcrypt, and set the cost.
- Hash. A salted hash is produced in the standard encoded format.
- Verify (optional). Paste an existing hash to check whether a plaintext matches it.
Storing passwords means never storing the password — you store a slow, salted hash and re-derive it at login. This tool produces those hashes for building and testing auth: Argon2id and bcrypt, in their standard self-describing formats that carry the salt and parameters inline.
The verify mode is the other half of the workflow: paste a hash from your database and a candidate plaintext to confirm your comparison logic behaves. The per-hash salt is why the same password yields different strings each time.
This is for hashing at rest; to fingerprint a file instead use Hash & checksum, and to judge how guessable a password is, use the Password strength checker.
Frequently asked questions
Should I use Argon2id or bcrypt?
Argon2id is the current recommendation — memory-hard and resistant to GPU cracking. bcrypt is still solid and ubiquitous; choose it when your platform or existing hashes require it.
What is the cost factor for?
It sets how much work each hash takes. Higher cost slows attackers but also your own verification, so tune it to be as slow as your login flow can comfortably tolerate.
Why do two hashes of the same password differ?
Each hash includes a random salt, so identical passwords produce different hashes. Verification re-derives using the stored salt, which is embedded in the hash string.
Is the plaintext uploaded to hash it?
No. Argon2id runs via WASM and bcrypt in-browser on your device, so the passwords you enter for testing never leave the tab.
Related tools
- Hash & checksumSHA & MD5 digests
- Password strengthzxcvbn scoring
- AES file encryptArgon2id + AES-GCM
- Password GeneratorGenerate strong random passwords and memorable diceware passphrases using your browser's cryptographic RNG. Tune length, character sets, and word count, see a live strength and entropy estimate, and copy — nothing is generated on or sent to a server.