Argon2 Parameters Calculator
Work out argon2 parameters instantly with clear inputs, formula shown and shareable results.
About Argon2 Parameters Calculator
Argon2id is memory-hard, so its defence comes from the memory cost rather than iteration count: an attacker must provide that much memory per parallel guess, which is what breaks cheap GPU and ASIC parallelism. The constraint on your side is that concurrent logins multiply the memory requirement, so 64 MiB with 20 simultaneous logins reserves 1.25 GiB.
Formula
Argon2 resource use
peak memory = memory cost x concurrent logins; time ~ memory x passes x hardware factor; threads = lanes x concurrent logins
Worked example
With the default values below, Argon2 Parameters Calculator returns Peak memory at full login concurrency of 1,280. Change any input above and every figure here is recalculated in your browser.
Inputs used
- Memory costaccepts 8–4,096 MiB
- 64 MiB
- Time cost (passes)accepts 1–20
- 3
- Parallelism (lanes)accepts 1–32
- 4
- Concurrent logins to supportminimum 1
- 20
Results
- Peak memory at full login concurrency
- 1,280 MiB
- Estimated hash time
- 86 ms
- Threads consumed at peak
- 80
- Comparison with published guidance
- Meets OWASP minimum for Argon2id (19 MiB, t = 2, p = 1)
Step by step
- 1Values used
- 2Argon2 resource use
- 3Peak memory at full login concurrency= 1,280 MiB
- 4Estimated hash time= 86 ms
- 5Threads consumed at peak= 80
- 6Comparison with published guidance= Meets OWASP minimum for Argon2id (19 MiB, t = 2, p = 1)
Assumptions and limits
- The result is derived only from the 4 inputs listed above. Anything not among them is not part of the calculation.
- In particular, this calculator does not take inflation, tax or compounding frequency into account.
- Figures are rounded for display to whole numbers, so totals built from several rounded parts can differ slightly from the unrounded arithmetic.
How these calculators are built and tested is described on the Methodology page. If a figure looks wrong, please report it.
Frequently Asked Questions
Which Argon2 variant should I use?
Argon2id. It combines Argon2i's side-channel resistance in the first pass with Argon2d's stronger resistance to time-memory trade-offs afterwards.
Is more memory always better?
Up to your server's limit. Trade memory against passes: OWASP notes that 19 MiB with two passes and 46 MiB with one pass offer comparable resistance.
Related Calculators
- Access Review Effort Calculator
- Alert Triage Capacity Calculator
- Annualised Loss Expectancy Calculator
- Audit Sample Size Calculator
- Backup Encryption Time Calculator
- Base Encoding Size Calculator
- Bcrypt Cost Factor Calculator
- Birthday Attack Probability Calculator
- Bitcoin Mining Hash Rate Calculator
- Blockchain Hash Difficulty Calculator
You might also need
- Checksum Verification CalculatorAlso in Security, Cryptography & Risk
- CRC Value CalculatorAlso in Security, Cryptography & Risk
- Keyspace Size CalculatorAlso in Security, Cryptography & Risk
- OTP Entropy CalculatorAlso in Security, Cryptography & Risk
- Security Maturity Score CalculatorAlso in Security, Cryptography & Risk
- Steganography Capacity CalculatorAlso in Security, Cryptography & Risk
