PBKDF2 (Password-Based Key Derivation Function 2) is a standard key derivation function whose core purpose is to convert a human-memorable password (which is often less secure) into a high-strength cryptographic key.

• Master Password (Password): Your original password or passphrase, which will be used as the base for key derivation.
• Salt (Salt): A randomly generated piece of data that does not need to be kept secret. Its purpose is to ensure that even if two users have the same password, they will have different derived keys, thus protecting against rainbow table attacks. The best practice is to use a unique salt for each password.
• Iterations (Iterations): This is the security core of PBKDF2. It specifies the number of times the internal hash function is repeated. The higher the number of iterations, the longer it takes to derive the key, exponentially increasing the difficulty of brute-force attacks. Modern applications recommend at least 100,000 iterations.
• Derived Key: The final result computed from the process above. It is a fixed-length, highly random sequence of bytes that can be directly used as a key for other cryptographic algorithms (like AES).

All computations are performed locally in your browser. Your master password is absolutely secure and is never sent to any server.