Skip to content

scrypt

Secure

scrypt is a password-based key derivation function designed to be memory-hard, making it expensive to attack with specialized hardware (ASICs and GPUs). It requires significant RAM in addition to CPU time.

What is scrypt?

scrypt is a secure cryptographic hash algorithm that produces a Configurable (typically 256 bits / 32 bytes) output. scrypt is a password-based key derivation function designed to be memory-hard, making it expensive to attack with specialized hardware (ASICs and GPUs). It requires significant RAM in addition to CPU time. It is classified as slow (intentional) in performance and commonly used for password hashing with memory-hardness requirements and cryptocurrency mining (litecoin, dogecoin use scrypt).

Output Length

Configurable (typically 256 bits / 32 bytes)

Speed

Slow (Intentional)

Security

Secure

Performance

Intentionally slow and memory-intensive. The memory requirement makes GPU/ASIC attacks much more expensive than bcrypt.

Use Cases

Example Hash

Input:

MyPassword123

scrypt Output:

$scrypt$ln=17,r=8,p=1$aM15713r3Xsvxbi31lqr1Q$nFNh2CVHVjNldFVKDHDlm4CbdRSCdEBsjjJxD+iCs5E

Try scrypt Password Hasher

Hash and verify passwords with scrypt directly in your browser via WebAssembly. Free, instant, and 100% private.

Try scrypt Now →

Related Algorithms

bcrypt Secure
184 bits (60 character encoded string)
Argon2 Recommended
Configurable (typically 256 bits / 32 bytes)
PBKDF2 Secure
Configurable (depends on underlying hash function)

Related Reading

SHA-256 vs SHA-512 vs MD5: Hash Algorithm Comparison → How to Create a Strong Password in 2026 → What Is JWT and How It Works →