Don’t know how to choose Argon2 parameters?

Finding the appropriate parameter set for Argon2 can be a bit overwhelming at first. Luckily the authors of RFC9106 (see https://www.rfc-editor.org/rfc/rfc9106.html) thought of that and provide a set of universal recommended options that should be good to use for some years to come: see https://www.rfc-editor.org/rfc/rfc9106.html#name-parameter-choice.

RFC9106 also has you covered in case the recommended options don’t fit your use case. Section 4 contains a step-by-step guide to determine the appropriate set of parameters.

Always remember, that like any other password hashing function, these parameters need to be adjusted from time to time to account for advancements in hardware as well as cryptographic research. If you fail to do so breaches like the one of LastPass in 2023 will enable password recovery attacks.