Bcrypt / Argon2 Cost Calculator
Explore calibrated bcrypt doubling, exact-parameter Argon2id timing and an explicit uniform-keyspace offline attack model.
Enabling local controls…
Illustrative editable calibration only. No server/GPU benchmark or real hash runs. Argon2 time is not inferred from memory or iterations.
bcrypt work doubles per cost step. bcrypt generally truncates input after 72 bytes; this model does not enforce password encoding or truncation. Select production parameters using a vetted library and measurements under your real workload. Argon2id m/t/p changes require a new calibration.
How to use this tool
Enter your own measured hash milliseconds and attacker guesses per second; review every assumption.
When not to use it
Defaults are editable illustrative values, not server or GPU benchmarks. No hashing is performed; dictionary attacks and password reuse are not modeled.