KDFs hash-wasm kdf

PBKDF2 Generator - Password-Based Key Derivation

Generate secure keys from passwords using PBKDF2 - the industry standard for password-based key derivation.

pbkdf2.workspace
4 options
0 bytes UTF-8, Hex, or Base64 input
Options
Salt *

0 bytes

Secure client-side computation. No data leaves your browser. Privacy Security

Result Output

What Is PBKDF2?

PBKDF2 (Password-Based Key Derivation Function 2) is a key derivation function specified in PKCS #5 and updated by RFC 8018, using HMAC with configurable iterations to slow down brute-force attacks and derive secure keys from passwords.

Specifications

Output Size Variable
Standard RFC 8018 (PKCS #5 v2.1)
Standard Year 2017
Origin RFC 2898 (PKCS #5 v2.0)
Origin Year 2000

Use Cases

  • Password hashing for user authentication
  • Deriving encryption keys from passwords
  • WiFi WPA/WPA2 key derivation
  • Apple iOS keychain encryption
  • Legacy password storage systems
!

Security Notice

PBKDF2 requires high iteration counts (100,000+) for security. For new systems, consider Argon2id as a more modern alternative.

Related Tools

Argon2id KDFs Scrypt KDFs bcrypt KDFs

Utilities

File Hash Verifier Verify local files against published checksums. Hash Compare Compare expected and actual digest values. Multi Hash Generator Generate common hashes from one input.

Guides

Algorithm Comparison Guide Choose the right primitive for each task. Hash Test Vectors Compare known outputs across common algorithms.

Implementation Notes

Practical usage details for this browser-based PBKDF2 tool.

How to Generate a PBKDF2 derived value

  1. Choose UTF-8, Hex, Base64 input mode.
  2. Enter the text or encoded bytes you want to process.
  3. Adjust the PBKDF2 options if your use case requires non-default settings.
  4. Click Generate PBKDF2 Derived Value and copy the result.

Example Input

Sample input:

abc

Use this sample input, then copy the generated derived value from the result panel.

When Not to Use PBKDF2

  • Do not use it when your workflow requires very fast computation.
  • Do not use it with iteration counts too low for the threat model.

Recommended Alternatives

Recommended migration target: Argon2id. PBKDF2 is still secure but memory-hard alternatives are preferred.

Frequently Asked Questions