PBKDF2 Generator
Derive a key from a password with PBKDF2 (HMAC SHA-1, SHA-256, SHA-384 or SHA-512), with OWASP iteration guidance and hex or Base64 output. Private.
More options
Password and salt
Derived key
Shortcuts: Ctrl+Enter run · Ctrl+Shift+C copy result · / search (use ⌘ on Mac)
Next steps
Done here? Use the Send to… menu on the result to carry it on to Base64URL & Base32 Converter.
Free Online PBKDF2 Key Derivation Calculator
Turn a password and a salt into a key with PBKDF2. Choose the hash, the number of iterations and the length; the page tells you when the work is below what OWASP recommends. It gives developers a quick browser-based way to solve a focused pbkdf2 generator task before moving the result into a project.
How to derive a key
Type the password, choose the hash and enter a salt (or press Random salt), then press Derive key. Copy the key as hex or Base64.
Matching another system
Use the same hash, iterations, key length and exact salt bytes. If the other side gives the salt as hex or Base64, choose that format here.
Common mistakes
- Using the salt as text on one side and as hex on the other: the bytes differ and the keys never match.
- Keeping the old default of 1,000 or 10,000 iterations, which is far too low today.