Systray

Client-side tool to generate/verify password hashes with realistic parameters. Helpful for debugging integrations and understanding how salts, memory, and iterations affect cost. Runs locally—no passwords leave your browser.

Your data security is our top priority. All hashing and verification happen in this browser. This tool does not store or send your password nor hashes outside of the browser. See source code in: https://github.com/authgear/authgear-widget-password-hash

More Developer Tools

First, there are the . These are the icons that belong there. The Wi-Fi strength indicator, the battery meter, the audio volume. These are the vital signs of the hardware. They communicate in colour and shape: a red 'X' means disaster; a yellow exclamation mark means caution; a pristine white silhouette means all is well with the world. They are the silent guardians of connectivity and power.

Look closer. Each icon is a background worker: the antivirus that silently blocks threats you’ll never know existed, the cloud sync shuffling bytes while you sleep, the volume slider that shapes your auditory world without ever being thanked. They are the invisible scaffolding of your day.

So hover over each icon. Ask: Do I still need this process? Some services are essential. Some are just noise. And some… some have been waiting years for a double-click.

Nestled in the corner of your screen — often overlooked, always running — it is the digital equivalent of the subconscious. A place where processes continue without applause. Where software lives not in glory, but in quiet persistence.

One-click menus for safely removing hardware, adjusting display settings, or accessing application-specific shortcuts. Historical Context and Terminology

How to use the Password Hash Generator

Step 1.
Enter a password
  • Open the Generate tab and type a demo password (avoid real credentials).
Step 2.
Select an algorithm
  • For new systems, Argon2id is generally recommended.
Step 3.
Set parameters:
  • Argon2id: Memory (MiB), Iterations (t), Parallelism (p).
  • bcrypt: Cost (2cost rounds).
  • scrypt: N (power of two), r, p.
  • PBKDF2: Iterations and digest (SHA-256/512).
Step 4.
Generate Password Hash
  • Click Generate Password Hash. Copy the encoded string.
Step 5.
Verify Password Hash
  • Switch to Verify Password Hash to test a password + encoded hash pair.
systray

Is it safe to use this with real passwords?

All hashing happens locally in your browser. For your own safety, avoid using production secrets in any online tool.
systray

Which hashing function should I use?

For new systems, Argon2id is generally recommended. bcrypt and scrypt are widely deployed; PBKDF2 is a compatibility fallback. Always benchmark and choose parameters that meet your latency targets.
systray

How long should hashing take?

Many teams target ~250–500ms in the authentication path. Pick the slowest settings that still keep UX smooth on your production hardware.
systray

Why won’t my framework verify the hash?

Common issues: whitespace/line endings, encoding mismatch (hex vs Base64), bcrypt prefix differences ($2a$ vs $2b$), or forgetting a pepper.
systray

What salt length should I use?

16–32 bytes of random data is standard. The tool defaults to secure randomness and shows length and encoding.

Systray

First, there are the . These are the icons that belong there. The Wi-Fi strength indicator, the battery meter, the audio volume. These are the vital signs of the hardware. They communicate in colour and shape: a red 'X' means disaster; a yellow exclamation mark means caution; a pristine white silhouette means all is well with the world. They are the silent guardians of connectivity and power.

Look closer. Each icon is a background worker: the antivirus that silently blocks threats you’ll never know existed, the cloud sync shuffling bytes while you sleep, the volume slider that shapes your auditory world without ever being thanked. They are the invisible scaffolding of your day. systray

So hover over each icon. Ask: Do I still need this process? Some services are essential. Some are just noise. And some… some have been waiting years for a double-click. First, there are the

Nestled in the corner of your screen — often overlooked, always running — it is the digital equivalent of the subconscious. A place where processes continue without applause. Where software lives not in glory, but in quiet persistence. These are the vital signs of the hardware

One-click menus for safely removing hardware, adjusting display settings, or accessing application-specific shortcuts. Historical Context and Terminology

Systray

Open source Auth0/Clerk/Firebase alternative. Passkeys, SSO, MFA, passwordless, biometric login.

Star us on
systray
Close