0 bytes
Drag & drop a file here
Algorithms for files (each one costs time on big files)
Hashing…
No file chosen yet.
Store passwords with a slow, salted password hash (bcrypt, Argon2id, PBKDF2) — never with plain MD5/SHA-256, which attackers can test billions of times per second.
In PHP:
password_hash() / password_verify() understand the bcrypt ($2y$) and Argon2id strings created here.
Create a hash
Defaults: OWASP minimum (19 MiB, 2 iterations). PHP's default is 64 MiB, 4 iterations.
600,000 iterations: OWASP recommendation for PBKDF2-HMAC-SHA256.