The derived key is only reproducible with the same salt and parameters, so store those too. The encoded option bundles them into one string.
Scrypt derived key
Scrypt Hash Generator
Derive a key or hash a password with scrypt.
About the Scrypt Hash Generator
What is a scrypt hash?
Scrypt is a password-based key derivation function designed to be expensive in both time and memory. That memory-hardness is its defining feature: it deliberately uses a large amount of RAM so that attackers cannot cheaply parallelize cracking on GPUs or custom hardware, which is where fast hashes fall down. You control the cost with three parameters, N, r and p.
Scrypt is used for password storage and, famously, as the proof-of-work in cryptocurrencies like Litecoin, as well as for deriving encryption keys from passphrases. Because scrypt output is just a derived key, this tool shows it as hexadecimal, Base64, or an encoded string that bundles the parameters and salt so the result is reproducible. Everything is computed locally in your browser.
How to Use This Tool
- Enter the password. Type or paste the password you want to hash.
- Adjust the settings. Tune the cost parameters and salt; the hash recomputes automatically.
- Copy the result. One click copies the hash to your clipboard.
- Store it safely. Keep the salt and parameters so the key can be reproduced.
Common Use Cases
- Password storage: a memory-hard alternative to bcrypt for hashing user passwords.
- Deriving encryption keys: turn a passphrase into a strong key for encrypting files or data.
- Cryptocurrency: scrypt is the hashing algorithm behind Litecoin and several other coins.
- Reproducible key derivation: store the salt and N, r, p values so you can derive the exact same key again.
Frequently Asked Questions
What do N, r and p mean in scrypt?
N is the CPU and memory cost, and must be a power of two; doubling it doubles both time and memory. r is the block size, which tunes memory use, and p is parallelism. Common settings are N of 16384 or 32768, r of 8 and p of 1. Higher values are stronger but slower and use more RAM.
Why is scrypt memory-hard?
Fast hashes can be cracked cheaply because attackers run thousands of them in parallel on GPUs. Scrypt forces each computation to hold a large block of memory, which is expensive to replicate in parallel, so it levels the playing field between an attacker's hardware and a normal server.
Is scrypt better than bcrypt?
It depends. Scrypt's memory-hardness gives it an edge against GPU and ASIC attacks, while bcrypt is simpler and more universally supported. For new password storage many people now choose Argon2id, which builds on the ideas of both. All three are far better than a plain hash.
Do I need to store the salt and parameters?
Yes. A scrypt derived key is only reproducible with the exact same salt and the same N, r and p values, so store them alongside the key. The encoded output option here packs all of that into a single string so nothing gets lost.
Can I reverse a scrypt hash?
No. Scrypt is a one-way function; there is no way to recover the password from the derived key except by guessing, which its cost parameters make deliberately slow.
Is my password kept private?
Yes. Scrypt runs entirely in your browser through a vendored library. Your password, salt and derived key never leave your device.