Skip to main content

Scrypt Generator

Make scrypt password hashes with OWASP settings and see how long each setting takes in your browser, or check a password against an scrypt hash. Private.

More options

Memory needed: about 16 MiB.

Password

scrypt hash

The hash appears here.

Shortcuts: Ctrl+Enter run · Ctrl+Shift+C copy result · / search (use ⌘ on Mac)

Free Online Scrypt Hash Generator

Make a scrypt hash from a password with settings recommended by OWASP, and see how much memory and time they need in your browser. You can also check a password against a scrypt hash. It gives developers a quick browser-based way to solve a focused scrypt generator task before moving the result into a project.

How to make an scrypt hash

Type the password, choose a setting from the list and press Make hash. The hash is shown in the standard text form and as plain hex.

Changing the settings

Open More options to set N, r, p, the output length and a salt of your own. The memory the settings need is shown before you start.

Common mistakes

  • Picking a very large N: the work and memory double with each step and a browser tab can run out of memory.
  • Setting a fixed salt in production. Leave it empty so every hash gets a fresh random salt.

Frequently asked questions

What do N, r and p mean?
N is the work and memory cost (a power of two). r is the block size, and p is the number of parallel lanes. Memory used is about 128 × N × r bytes.
Which settings does OWASP recommend?
N=2^17 with r=8 and p=1, or an equal-strength choice such as N=2^16, r=8, p=2 or N=2^15, r=8, p=3. They are in the Settings list.
Why a $scrypt$ string?
scrypt has no single standard text form. This page writes the common PHC style: $scrypt$ln=<log2 N>,r=<r>,p=<p>$<salt>$<hash>, and can check a password against it.
Is my password uploaded?
No. The hash is made in your browser. Do not paste real production passwords into any website.
How do I use this scrypt generator tool?
Use the interactive controls above; processing stays in your browser and the result is intended as a practical starting point for development work.

More Security & Auth

View all Security & Auth tools →