Scrypt KDF Parameter Planner
Compute scrypt, PBKDF2, and Argon2 memory and cost parameters without running key derivation in your browser.
Plan scrypt, PBKDF2, and Argon2 cost parameters
Password hashing and key derivation functions trade CPU time and memory against attacker cost. RFC 7914 defines scrypt; RFC 8018 covers PBKDF2; Argon2 won the Password Hashing Competition. This planner estimates memory and compares your knobs to the OWASP Password Storage Cheat Sheet (2023) without running derivation in the browser.
How to use it
- Choose scrypt, PBKDF2, or Argon2.
- Enter N/r/p, iterations, or Argon2 m/t/p values from your library or config file.
- Read estimated memory (scrypt/Argon2) and whether the set meets OWASP minimums.
To actually derive keys, use PBKDF2 Key Derivation or Scrypt Hash Generator.
Frequently Asked Questions
Does this tool hash my password?
No. It only computes parameter metadata such as scrypt memory (128·N·r) and OWASP guidance.
What scrypt values does OWASP recommend?
At least N=217, r=8, and p=1 for new systems in the 2023 cheat sheet.
Why plan Argon2 memory in KiB?
Libraries such as libsodium and argon2 reference the memory cost parameter m in kibibytes; the planner uses the same unit.