Scrypt Hash Generator

Scrypt Hash Generator

What it does

This tool derives a cryptographic key from a password and salt using the scrypt algorithm. The output is a fixed-length hex string suitable for secure password storage or key derivation in your applications.

Use cases

Scrypt is used for storing user passwords, deriving encryption keys from passphrases, and as a proof-of-work mechanism in certain blockchains. Its memory-hard design makes it significantly harder to attack with specialised hardware compared to algorithms like MD5 or SHA-256.

Choosing parameters

The N parameter (CPU/memory cost) should be as high as your application can tolerate while still providing acceptable response times — typically 100ms to 1s for interactive logins. r (block size) and p (parallelisation) are usually left at their defaults of 8 and 1. The keyLen parameter controls the output length in bytes; 32 bytes (256-bit) or 64 bytes (512-bit) are common choices.

Salt handling

A unique random salt must be generated for every password. The salt prevents rainbow table attacks and ensures that two identical passwords produce different hashes. Use the Generate Salt button to create a cryptographically random salt, and store it alongside your hash.

Browser-side processing

All computation happens locally in your browser. No data is transmitted to any server. For high N values the calculation may take several seconds — this is expected and is what makes scrypt resistant to brute-force attacks.