0Pricing
Cryptology Academy · Lesson

Argon2: Memory-Hard Password Hashing

Explore Argon2i, Argon2d, Argon2id and why memory-hardness matters.

Welcome

Argon2 won the Password Hashing Competition (PHC) in 2015 and is OWASP's top recommendation. Its memory-hard design defeats GPU and ASIC attacks that bcrypt cannot.

Why Memory-Hardness Matters

GPUs have thousands of cores but limited RAM per core (~1KB). Argon2 requires 64MB+ RAM per hash. Attackers trying 1000 parallel hashes need 64GB RAM — expensive and limited.

All lessons in this course

  1. Why Plain SHA-256 Fails for Passwords
  2. bcrypt: Algorithm & Cost Factor
  3. Argon2: Memory-Hard Password Hashing
  4. PBKDF2 & Choosing the Right Algorithm
← Back to Cryptology Academy