scrypt Password Hash Generator

Hash a password using scrypt, a memory-hard key derivation function designed to be expensive to compute on custom hardware (GPUs, ASICs). scrypt was designed by Colin Percival for the Tarsnap backup service and is used in many cryptocurrency systems. Its memory-hardness makes it more resistant to hardware acceleration than bcrypt.

Privacy: this tool processes all data entirely in your browser. Passwords and hashes are never sent to the server.

The password is never sent anywhere.

Optional: provide your own salt (hex). Leave blank for auto-generation.

CPU/memory cost parameter. Must be a power of 2. Default: 16384 (2^14).

Block size parameter. Default: 8. Larger r increases memory usage linearly.

Parallelization parameter. Default: 1. Higher p increases computation time linearly.

Output key length. Default: 64 bytes.

Result

Enter your values and press Calculate — the result appears here.

Worked examples

Hash with default parameters

  • password = MySecret123!
  • N = 16384
  • r = 8
  • p = 1
  • keyLength = 64

Result: A 128-character hex hash.

Frequently asked questions

What do the N, r, p parameters mean?

N: CPU/memory cost (must be power of 2). Higher N = more memory required. r: block size (affects memory usage). p: parallelization factor (affects computation time independently of memory). Memory usage ≈ 128 × N × r bytes.

scrypt vs Argon2id vs bcrypt?

All three are secure. Argon2id is the modern recommendation (memory-hard + side-channel resistant). scrypt is memory-hard but lacks side-channel resistance. bcrypt is not memory-hard but is battle-tested and universally supported. Choose based on your framework's support.

Is my password sent to a server?

No. Hashing happens entirely in your browser. The password never leaves your device.

💬 Discuss on BestWordz Community

Join the conversation about Cybersecurity, scrypt, scrypt hash on the BestWordz Community forum.

Visit Forum →
Copied!