Bcrypt Hash Generator
Generate bcrypt password hashes with a tunable cost factor, or verify that a plaintext password matches an existing hash. Bcrypt includes built-in salting and is the recommended hash for passwords. Runs in your browser.
About Bcrypt
Bcrypt is a password hashing function with a tunable cost factor, designed to be slow and resist brute force. For non-password checksums use theHash Generator (SHA-256, SHA-512).
Secure & Private Client-Side
This tool runs entirely in your browser. No data is sent to any server, ensuring your information remains private and secure.
About Bcrypt Hash Generator
Generate bcrypt password hashes with a tunable cost factor, or verify that a plaintext password matches an existing hash. Bcrypt includes built-in salting and is the recommended hash for passwords. Runs in your browser.
Frequently Asked Questions
What is the cost factor? expand_more
The cost factor (rounds) controls how many iterations bcrypt runs. Each increment doubles the time. 10 is the historical default; 12 or higher is recommended for production.
Why does the same password produce different hashes? expand_more
Bcrypt generates a random salt for each hash, so the same password yields a different hash every time. Use the verify mode to check a password against any of them.
Is bcrypt better than SHA-256? expand_more
For passwords, yes. SHA-256 is fast, which makes brute force easier. Bcrypt is intentionally slow and salted, making it resistant to offline cracking.
Need a fast hash for files or checksums? expand_more
Use the [Hash Generator](/tools/hash-generator/) for MD5, SHA-1, SHA-256, and SHA-512 checksums.
Is my password uploaded? expand_more
No. Hashing happens locally in your browser using a pure-JavaScript bcrypt implementation.
Common Use Cases
- Auth Systems: Hash passwords before storing them in a database.
- Verification: Confirm a plaintext password matches a stored hash.
- Migrations: Re-hash legacy MD5 or SHA1 passwords to bcrypt.
- Demos: Show students how salting and cost factors affect hashing.