Argon2 Hash Generator

Generate Argon2id password hashes with configurable memory cost, time cost, and parallelism.

  1. Home
  2. Hash & Security
  3. Argon2 Hash Generator

Argon2 is the winner of the Password Hashing Competition (2015) and the OWASP-recommended algorithm for password storage. It is designed to be resistant to GPU and ASIC-based brute-force attacks.

1 MB 64 MB (Default) 1 GB
1 4 (Default) 20
1 2 (Default) 16

What is Argon2?

Argon2 is a memory-hard password hashing function that won the Password Hashing Competition in 2015. It was designed by Alex Biryukov, Daniel Dinu, and Dmitry Khovratovich from the University of Luxembourg. Argon2 is standardized as RFC 9106 and is recommended by OWASP as the primary password hashing algorithm.

There are three Argon2 variants:

  • Argon2d — Data-dependent memory access. Optimized for resistance against GPU and ASIC attacks. Suitable for cryptocurrencies and systems with no threat of side-channel attacks.
  • Argon2i — Data-independent memory access. Optimized for resistance against side-channel attacks. Suitable for password hashing and key derivation.
  • Argon2id (recommended) — Hybrid mode. Uses Argon2i for the first half of the first pass and Argon2d for the rest. Provides the best of both worlds — side-channel resistance and GPU/ASIC resistance.

Argon2id Hash Format

$argon2id$v=19$m=65536,t=4,p=2$bHc5VnpWLzlLSzFFcU9KQQ$GpHak5rWbGkzER1MBcN5GUhG4RWd0Lle1HqHoXHl8sA
  • $argon2id$ — Algorithm variant
  • v=19 — Version (0x13 = 19)
  • m=65536,t=4,p=2 — Memory (KiB), time cost, parallelism
  • Next — Base64-encoded salt (16 bytes)
  • Last — Base64-encoded hash (variable length)

Argon2 vs Bcrypt

Feature Argon2id Bcrypt
Memory-hard Yes — configurable memory cost Limited — fixed ~4 KB
Parallelism Configurable threads Single-thread only
GPU/ASIC resistance Strong (memory-hard) Good (salt + cost)
Side-channel resistance Yes (Argon2id hybrid) Partial
Max password length Unlimited 72 bytes
Output hash length Variable (default 32 bytes) Fixed 60 chars
Algorithm age 2015 (winner of PHC) 1999
OWASP recommendation Primary Secondary

How to Use This Argon2 Generator

  1. Enter a password — Type or paste the password you want to hash.
  2. Set memory cost — Higher values require more RAM. Default is 64 MB (65,536 KiB).
  3. Set time cost — Number of iterations. Default is 4.
  4. Set parallelism — Number of threads. Default is 2.
  5. Click "Generate Argon2 Hash" — The server computes the hash using PHP's password_hash() with PASSWORD_ARGON2ID.
  6. Copy the hash — Use the copy button to save the hash.

Frequently Asked Questions

Which Argon2 variant does PHP use?

PHP's password_hash() with PASSWORD_ARGON2ID uses the Argon2id variant, which is the most secure and recommended variant. It combines the side-channel resistance of Argon2i with the GPU/ASIC resistance of Argon2d.

What are recommended Argon2id parameters?

OWASP recommends the following minimums: memory cost = 19 MiB (19,456 KiB), time cost = 2, parallelism = 1. For production, start with the defaults (m=65536, t=4, p=2) and benchmark to find the maximum values that keep hash time under 500 ms on your server hardware.

Can I use Argon2 in Laravel?

Yes. Laravel uses bcrypt by default, but you can switch to Argon2 by setting 'driver' => 'argon2id' in config/hashing.php. This requires the PHP sodium extension (bundled with PHP 8.0+).

Is Argon2 backward compatible?

Yes. You can add Argon2 support to an existing system without breaking existing passwords. When verifying, use password_verify() which automatically detects the algorithm used to create the hash. You can then rehash old bcrypt hashes to Argon2 upon successful login using password_needs_rehash().

Why is Argon2 slow on this server?

Argon2 is designed to be intentionally slow and memory-hungry. The default parameters (64 MB memory, 4 iterations) require significant processing time, especially on shared hosting. This is a feature, not a bug — the same slowness that affects legitimate users also affects attackers trying to brute-force stolen hashes.

Related Hash & Security Tools

Bcrypt Generator

Generate bcrypt password hashes

Try it

MD5 Hash Generator

Generate MD5 hash from text

Try it

SHA-256 Generator

Generate SHA-256 hashes

Try it

Hash Type Identifier

Identify hash algorithm from a string

Try it

Password Strength Checker

Test password strength and entropy

Try it
Last updated: 17 Aug 2026

Related Tools

Try These Tools Too

JWT Token Verifier

Try it

AES Encryption/Decryption

Try it

Hash Type Identifier

Try it

HTML Sanitizer

Try it

Random Token Generator

Try it

Email Validator

Try it

Blog

Latest from Our Blog

Best Free Online Developer Tools to Use in 2026

A practical, opinionated list of the best free online developer tools worth using in 2026, organized by category so you can find what you need fast.

Aug 08, 2026

How to Choose a Hash Algorithm for Data Security

A practical decision guide to choosing the right hash algorithm: MD5, SHA-1, SHA-2, SHA-3, bcrypt, argon2, PBKDF2, and SRI, with comparisons and clear recommendations.

Aug 08, 2026

CSS vs Tailwind CSS: Which One Should You Use?

A thorough, practical comparison of hand-written CSS and Tailwind CSS: learning curve, maintainability, performance, team workflows, and when each approach wins.

Aug 08, 2026

How to Optimize Core Web Vitals for Your Website

Learn practical, step-by-step techniques to improve LCP, INP, and CLS on your website. A developer-focused guide with real measurements and fixes.

Aug 08, 2026

How to Use Base64 Encoding in Real Projects

Learn practical, production-ready ways to use Base64 encoding: data URLs for images, JWT payloads, API tokens, and email attachments, with real code examples.

Aug 08, 2026

AES Encryption Explained: How It Works and Why It Matters

Learn how AES encryption works, the differences between AES-128, AES-192, and AES-256, and how to encrypt and decrypt data online.

Jun 23, 2026
View All Articles →