---
title: "POST /derive-key"
method: POST
path: "/derive-key"
tags: ["v2"]
---

# POST /derive-key

`POST /derive-key`

## Request body

- DeriveKey
  - `accessibility` string — for personal password manager
  - `alg` string, required — Kdf algorithm
  - `hash-function` string — HashFunction the hash function to use (relevant for pbkdf2)
  - `iter` integer, required — IterationCount the number of iterations
  - `json` boolean — Set output format to JSON
  - `key-len` integer, required — KeyLength the byte length of the generated key
  - `mem` integer — MemorySizeInKb the memory paramter in kb (relevant for argon2id)
  - `name` string, required — Static Secret full name
  - `parallelism` integer — Parallelism the number of threads to use (relevant for argon2id)
  - `salt` string — Salt Base64 encoded salt value. If not provided, the salt will be generated as part of the operation. The salt should be securely-generated random bytes, minimum 64 bits, 128 bits is recommended
  - `token` string — Authentication token (see `/auth` and `/configure`)
  - `uid-token` string — The universal identity token, Required only for universal_identity authentication

## Response `200`

DeriveKeyResponse wraps response body.

- DeriveKeyOutput
  - `Key` string
  - `Salt` string

## Other responses

- `default` — errorResponse wraps any error to return it as a JSON object with one "error" field.

---

[API](https://skmtc.net/akeyless/apis/akeyless-api.md) · [All operations](https://skmtc.net/akeyless/apis/akeyless-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/akeyless/akeyless-api/versions/0ceb25634501/schema)