Is there a website with a key derivation function running entirely in client-side Javascript?

The string which is used to generate the key cannot be seen outside the client.

It shouldn't use a run-of-the-mill hash function like SHA2 but something more suitable like Scrypt, and it should use a large character set, not just A-F0-9.

closed as too broad by Steve, Mike Ounsworth, schroeder, ThoriumBR, Iszi Jul 27 '15 at 20:06

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • There are either too many possible answers, or good answers would be too long for SE's Q&A format. Please add details to narrow the answer set or to isolate an issue that can be answered in a few paragraphs. – Mike Ounsworth Jul 27 '15 at 19:25
  • @MikeOunsworth If there are too many possible answers give me one. – jkabrg Jul 27 '15 at 19:26
  • Javascript isn't my area of expertise so I can't offer anything specific, but the question, as stated, is rather broad (what do you mean by "The string which is used to generate the key cannot be seen outside the client"?). Given your high rep on Mathematics.SE, I'm sure you can edit the question to have more context and be more focused. – Mike Ounsworth Jul 27 '15 at 19:31

http://anandam.name/pbkdf2/ - I think this does it. It says demo but I think it does the job.

https://www.dailycred.com/article/bcrypt-calculator - So does this.


You can use javascript-bcrypt or crypto-js for PBKDF2. I don't know any scrypt JS implementations so I don't want to recommend one (you can always Google). While you mention scrypt in your question, I think that bcrypt and PBKDF2 are the most widely used functions.

  • I would like it to run in the browser. The point is that I can run it on any computer and recover my passwords. Also large character set. – jkabrg Jul 27 '15 at 19:40
  • 1
    I believe that those libraries will run in browsers. Are you using a really old browser or one that has JS disabled? If not, I think you should be fine. Am I mistaken? – Neil Smithline Jul 27 '15 at 19:43
  • my question said website. Currently online. Thanks for telling me about PBKDF2 though. – jkabrg Jul 27 '15 at 19:46
  • @NaN you could write your own website to do this, too. – schroeder Jul 27 '15 at 19:57
  • That was my thought too @schroeder. – Neil Smithline Jul 27 '15 at 19:58

Not the answer you're looking for? Browse other questions tagged or ask your own question.