Bcrypt is a password-hashing function designed to be deliberately slow, which makes brute-force attacks expensive. This tool hashes a password with bcrypt at a cost factor you choose, and can verify whether a password matches an existing bcrypt hash — all in your browser.
How to use it
- Type a password to hash.
- Choose a cost factor (10–12 is typical).
- Copy the generated hash.
- To verify, paste a hash and a password into the checker.
About Bcrypt Hash Generator
Storing passwords securely is non-negotiable, and bcrypt remains a trusted standard because its cost factor lets you make hashing slower as hardware gets faster. A higher cost means more time per guess for an attacker. This tool is ideal for generating test hashes, understanding how bcrypt’s salt and cost are embedded in the output string, and checking a password against a hash. Hashing runs locally with a JavaScript bcrypt implementation, so passwords are never transmitted.
FAQ
What is the cost factor?
A number controlling how slow hashing is. Each increment doubles the work. 10–12 is a common balance of security and speed.
Why is the hash different every time?
Bcrypt includes a random salt, so the same password produces a different hash each time. Verification still works because the salt is stored in the hash.
Should I use this in production?
Use it for learning and testing. In production, hash on your server with a maintained bcrypt library.