Skip to main content
Security & Authentication Tools

Scrypt Hash Generator

Generate a real scrypt password hash in your browser - configurable N/r/p cost parameters, using an actual scrypt implementation.

Enter a password and set the N/r/p cost parameters - this tool runs a real scrypt implementation in your browser.

N=16384, r=8, p=1 is a common practical default. Larger N values are exponentially slower and use more memory - values above 16384 may take a while in the browser.

Computed using a real, from-scratch RFC 7914 scrypt implementation (Salsa20/8 + ROMix, with PBKDF2-HMAC-SHA256 via your browser's native Web Crypto API) - your password is never transmitted anywhere.

Scrypt is deliberately memory-hard, like Argon2 - higher N values require more RAM to compute, which is what makes large-scale parallel cracking (e.g. on GPUs) expensive.

What Is Scrypt?

Scrypt is a memory-hard key derivation function designed to be expensive to compute in both CPU time and memory - controlled by three parameters: N (CPU/memory cost, must be a power of 2), r (block size), and p (parallelization factor).

Why Use This Tool?

Useful for testing scrypt parameter combinations or generating a real hash for development - scrypt's memory-hardness makes it a reasonable alternative to bcrypt/Argon2 in systems that already use it (like some cryptocurrency wallets and Node.js's built-in crypto.scrypt).

How to Use It

  1. Enter a password and a salt.
  2. Set N (as a power of 2, e.g. 16384), r, and p.
  3. Click Generate - a real scrypt-derived key is computed.
  4. Copy the resulting hex-encoded key.

Limitations

Like PBKDF2, scrypt doesn't have one single universal self-contained string format across every system that uses it - this tool shows the raw derived key and parameters, which you can format according to your target system's expected layout.

Share this tool: