PBKDF2 Key Derivation Function
Local ProcessingDerive cryptographic keys from passwords using PBKDF2 with customizable iterations, salt, key length, and hash algorithm.
How It Works & Processing Standards
Derive cryptographic keys from passwords using PBKDF2 with customizable iterations, salt, key length, and hash algorithm.
Tool processing runs in your browser. If you create a calculator or conversion share link, its values are included in the URL. See the privacy policy for account, analytics and advertising data.
Current Limits
- Maximum input length: 2,000,000 characters
PBKDF2 repeats a hash hundreds of thousands of times to slow down password guessing. Values are computed with Web Crypto, so you can check your server code gives the same result.
Large iteration counts can take a few seconds. Do not enter production passwords.
What You Can Do
- Iterations
- 1 to 5,000,000. The default 600,000 is the OWASP 2023 recommendation for SHA-256.
- Key length and hash
- Choose the byte length and SHA-256, SHA-512 or SHA-1.
How to Use PBKDF2 Key Derivation Function
- 1Enter password and saltType the password and the salt string.
- 2Set iterations, length, hashChoose the iteration count, key length in bytes and hash.
- 3CompareCompare the hex key with your server result.
Examples
Common Use Cases
- Checking a backend password-hash implementation against the standard
- Debugging code that derives encryption keys from passwords
Frequently Asked Questions (FAQ)
Why is a salt needed?
A different salt per user makes identical passwords produce different results, so precomputed tables (rainbow tables) cannot crack them all at once.