PBKDF2 Generator
Derive a key from a password with PBKDF2 — and see how iterations slow down attackers.
● 🔒 Your data is processed locally in your browser with the Web Crypto API and is never uploaded to our servers.
How it works
PBKDF2 (RFC 8018) applies HMAC to the password and salt thousands of times. The iterations make each guess slow for an attacker: OWASP recommends 600,000 iterations with SHA-256 (or 210,000 with SHA-512) in 2023+. The salt must be random and unique per password, so identical passwords produce different keys.
For storing user passwords on a server, modern alternatives like Argon2id or scrypt are even better; PBKDF2 remains standard and FIPS-approved.
FAQ
Can I reproduce a result from another library?
Yes — use the same password, salt bytes, iterations, hash and length. Test vectors from RFC 6070 (PBKDF2-HMAC-SHA1) match this tool.