Skip to content
uencoder

Argon2id

Argon2id is the hybrid variant of Argon2: data-independent in the first half-pass and data-dependent in the second, combining side-channel safety with time-memory trade-off resistance.

Purpose

The recommended default Argon2 variant, balancing Argon2i's side-channel safety with Argon2d's TMTO resistance.

Mechanism

The first half-pass fills the matrix with Argon2i data-independent addressing (side-channel resistant); the second half switches to Argon2d data-dependent addressing (strong TMTO resistance). Recommended as the default in RFC 9106.

Use cases

  • Recommended password hashing
  • Balanced security variant
  • RFC 9106 default

Related tools

References