Derive Cryptographic Keys & Hashes with PBKDF2
Compute memory-hard key derivations using PBKDF2 with up to 600,000 iterations, custom salts, and SHA-512.
About This Tool
PBKDF2 (Password-Based Key Derivation Function 2) applies a pseudorandom function to input passwords along with a cryptographic salt, repeating the process hundreds of thousands of times to thwart brute-force attacks.
Key Features
Configurable iterations (10k to 600k)
Supports SHA-512 and SHA-256
256-bit and 512-bit key lengths
Hexadecimal and Base64 export
How to Use This Tool
- Enter the password to derive.
- Set your custom salt or click 'Random Salt'.
- Choose iteration count (100,000+ recommended) and key length (256 or 512 bits).
- Click 'Derive Cryptographic Key' to view the output in Hex or Base64.
Why Use This Tool
- Complies with OWASP Password Storage Guidelines (100,000+ iterations for SHA-512).
- Used in password managers (Bitwarden, 1Password) and encrypted storage systems.
Pro Tips
- OWASP recommends at least 100,000 iterations of PBKDF2-SHA512 for modern applications
Frequently Asked Questions
What is PBKDF2 used for?
PBKDF2 is used to turn weak human passwords into strong, cryptographically secure keys for AES encryption and password storage.