Cryptographic salt generator

Generate a random salt of configurable length, in hexadecimal or base64, to strengthen password hashing.

Example:

How it works

A cryptographic salt is a random value added to a password before hashing, to prevent rainbow table attacks and ensure that two identical passwords produce different hashes. It's essential when you implement an authentication system yourself or configure an algorithm like bcrypt, scrypt or argon2, all of which require a unique salt per user.

What salt length should I choose?

16 bytes (128 bits) is a standard choice and more than enough for most uses; some systems use 32 bytes for extra margin. What matters is that the salt is unique for each stored password, not that it is especially long.

Does the salt need to stay secret?

No, a salt doesn't need to be secret: it is usually stored in plain text alongside the hash. Its purpose isn't to hide the password but to prevent the reuse of precomputed tables across different accounts.

100% local processing: generation happens entirely in your browser via WebAssembly, and the generated salt never leaves your device.