Turn a password into a cryptographic key with PBKDF2-HMAC-SHA256. Set your own salt, iteration count and key length, then copy the result as hex or Base64. This is the same building block used by Wi-Fi WPA2, encrypted archives and many password managers.

HMAC-SHA256 based

Custom salt & iterations

Hex or Base64 output

Runs offline

Use the tool now Step by Step

Trusted & free

It is completely free, private and requires no signup.

Hashing is one-way

You cannot recover the original input from a hash.

Use salted KDFs for passwords

bcrypt or argon2 for passwords; SHA-256 for integrity.

Verify, don't rely on speed

Compare digests for integrity; prefer slow algorithms for secrets.

How it works

Type the password or passphrase you want to derive a key from.

Use a unique random salt and at least 100,000 iterations for password storage.

Pick a 256-bit (32-byte) key for AES-256, or longer for other uses.

Examples & Data

Setting	Value
Hash	HMAC-SHA256
Iterations	100,000
Key length	256 bits (32 bytes)
Salt	16 random bytes

Use the same salt and iterations later to derive the identical key again.

All tools

Password Strength Checker

Score any password and estimate crack time

Password Generator

Create strong random passwords up to 128 chars

Random String Generator

Random tokens, IDs and keys with any charset

Passphrase Generator

Memorable multi-word passphrases (Diceware)

TOTP / 2FA Code Generator

Time-based one-time codes and otpauth secrets

Password Breach Checker

Check if a password appeared in known breaches

SHA-256 Generator

Hash text to a 64-char SHA-256 digest

MD5 Generator

Compute the 32-char MD5 checksum of any text

SHA-1 Generator

Generate the 40-char SHA-1 hash of any input

SHA-512 Generator

Hash text to a 128-character SHA-512 digest

HMAC Generator

HMAC-MD5, SHA-1, SHA-256 & SHA-512 with secret key

bcrypt Generator / Checker

Hash passwords with bcrypt and verify hashes

PBKDF2 Key Derivation

Derive keys from a password with salt and iterations

AES Encrypt / Decrypt Text

Encrypt text with AES-256-GCM and a password

File Hash / Checksum

Compute SHA hashes of any file locally

IP Address Checker

Identify IPv4 vs IPv6, public/private and more

IPv4 Calculator

Network, broadcast, hosts, subnet mask & wildcard

IPv6 Calculator

Expand, compress and subnet IPv6 addresses

Subnet Calculator

CIDR ranges, wildcard masks and usable hosts

MAC Address Generator

Random valid MAC addresses, unicast or multicast

Port Checker

Learn what each TCP/UDP port number means

DNS Lookup

Resolve A, AAAA, MX, NS, TXT and CNAME records

WHOIS Lookup

Domain registration, expiry and registrar info

HTTP Header Analyzer

Security, caching & SEO headers explained

User-Agent Parser

Decode browser, OS and device from any UA

MIME Type Lookup

File extension to MIME type reference

HTTP Status Code Lookup

Every status code 1xx–5xx explained

URL Encoder / Decoder

Percent-encode URLs and parse query strings

Color Contrast Checker (WCAG)

Check text contrast against WCAG AA & AAA

UUID / ULID Generator

UUID v4, v7, ULID and NanoID in bulk

JWT Decoder & Signer

Decode, inspect and sign JSON Web Tokens

Base64 Encoder / Decoder

Encode and decode Base64, standard or URL-safe

QR Code Generator

QR codes for links, Wi-Fi and vCards

JSON Formatter & Validator

Format, minify and validate JSON instantly

Unix Timestamp Converter

Convert Unix timestamps to dates and back

Regex Tester

Test regular expressions with live matches

Diff Checker

Compare two texts and highlight differences

Lorem Ipsum Generator

Placeholder paragraphs, sentences or words

Number Base Converter

Convert between binary, octal, decimal and hex

Color Converter (HEX / RGB / HSL)

Convert colors and copy HEX, RGB or HSL

CSV to JSON Converter

Convert CSV to JSON and JSON back to CSV

Case Converter & Slug Generator

camelCase, snake_case, kebab-case, Title & slug

Word & Character Counter

Words, characters, sentences and reading time

Ready to try it?

It is completely free, private and requires no signup.

Use the tool now

100% Free No signup Private & secure

Help Center

Frequently Asked Questions

Password-Based Key Derivation Function 2 (RFC 8018) applies a hash many times with a salt to slow down brute-force attacks and turn a password into a fixed-length key.

At least 100,000 for PBKDF2-HMAC-SHA256 today, and more as hardware gets faster. Aim for a few hundred milliseconds per derivation.

bcrypt and argon2 are usually preferred for storing passwords. PBKDF2 remains the safe, widely-implemented standard and is great for deriving encryption keys.

No. The salt must be unique and random, but it can be stored alongside the hash. Its job is to defeat precomputed tables.

Bright Coding Network