caddy-hash-password - Man Page

caddy hash-password [--plaintext ] [--algorithm ] [--bcrypt-cost ] [--argon2id-time ] [--argon2id-memory ] [--argon2id-threads ] [--argon2id-keylen ] [flags]

Convenient way to hash a plaintext password. The resulting hash is written to stdout as a base64 string.

--plaintext
   The password to hash. If omitted, it will be read from stdin.
   If Caddy is attached to a controlling TTY, the input will not be echoed.

--algorithm
   Selects the hashing algorithm. Valid options are:
     * 'argon2id' (recommended for modern security)
     * 'bcrypt'  (legacy, slower, configurable cost)

bcrypt-specific parameters:

--bcrypt-cost
   Sets the bcrypt hashing difficulty. Higher values increase security by
   making the hash computation slower and more CPU-intensive.
   Must be within the valid range [bcrypt.MinCost, bcrypt.MaxCost].
   If omitted or invalid, the default cost is used.

Argon2id-specific parameters:

--argon2id-time
   Number of iterations to perform. Increasing this makes
   hashing slower and more resistant to brute-force attacks.

--argon2id-memory
   Amount of memory to use during hashing.
   Larger values increase resistance to GPU/ASIC attacks.

--argon2id-threads
   Number of CPU threads to use. Increase for faster hashing
   on multi-core systems.

--argon2id-keylen
   Length of the resulting hash in bytes. Longer keys increase
   security but slightly increase storage size.

-a, --algorithm="bcrypt" Name of the hash algorithm

--argon2id-keylen=32 Length of the resulting Argon2id hash in bytes. Longer hashes increase security but slightly increase storage size.

--argon2id-memory=47104 Memory to use in KiB for Argon2id hashing. Larger values increase resistance to GPU/ASIC attacks.

--argon2id-threads=1 Number of CPU threads to use for Argon2id hashing. Increase for faster hashing on multi-core systems.

--argon2id-time=1 Number of iterations for Argon2id hashing. Increasing this makes the hash slower and more resistant to brute-force attacks.

--bcrypt-cost=14 Bcrypt hashing cost (only used with 'bcrypt' algorithm)

-h, --help[=false] help for hash-password

-p, --plaintext="" The plaintext password

caddy(8)

13-Jun-2026 Auto generated by spf13/cobra

caddy(8).