PBKDF2 Generator

Turn a password and salt into a strong derived key with PBKDF2 and a configurable round count.

Derive a key with PBKDF2

Status: —
Time: —
PBKDF2 runs through crypto.subtle.deriveBits, so the password and key material never leave your browser.

How to use the PBKDF2 Generator

  1. Type the password or passphrase you want to derive from.
  2. Set the salt, iteration count, hash and key length.
  3. Click Derive key, then copy the resulting key material.

Features

Advertisement

Frequently Asked Questions

Common questions about the free online pbkdf2 generator.

PBKDF2 is a key derivation function that hashes a password together with a salt many times, which makes each guess expensive for an attacker.
Every extra round adds work for both you and an attacker. Choose the highest count your hardware can afford, typically hundreds of thousands.
A unique random value at least 16 bytes long, stored next to the derived key. Use the random salt button instead of a fixed word.
SHA-256 is a solid default. SHA-1 is accepted by older protocols and SHA-512 is useful when you want a longer internal state.
Argon2 and scrypt resist graphics card attacks better because they need memory as well as time. PBKDF2 is widely supported and still acceptable.
Use it as an encryption key, a password verifier or key material for another protocol. Store the salt and iteration count with it.
No. Derivation uses the Web Crypto API inside the page, so the password, salt and key never leave your device.
Yes. It is completely free, works offline once loaded, and needs no account, no sign-up and no installation.

Last updated: October 10, 2026