Bcrypt Hash Generator

Generate bcrypt password hashes with a cost factor from 4 to 15, and check whether a password matches an existing bcrypt hash. Hashing runs in a background worker in your browser; nothing is sent or stored.

This tool runs entirely in your browser.

Loading tool…

How to use the Bcrypt Hash Generator

1Type the password and choose a cost factor (10–12 is typical).
2Click “Generate hash” and copy it.
3To verify, enter a password and an existing hash and click Verify.

What is the Bcrypt Hash Generator?

bcrypt is a password-hashing function designed to be slow: the cost factor sets the work to 2^cost rounds, so each step up doubles the time. That slowness makes guessing passwords from a stolen database expensive, which plain hashes such as SHA-256 do not. A bcrypt hash stores everything needed to check it — version ($2b$), cost, a random 22-character salt and the 31-character result — which is why the same password gives a different hash each time.

Choose a cost that takes roughly 100–300 ms on your server; 10–12 is common today. bcrypt only uses the first 72 bytes of a password, and the tool warns when input is longer.

Frequently asked questions

Why is the hash different every time?

A new random salt is generated for each hash. Verification reads the salt from the stored hash, so any of them will match the right password.

Is bcrypt still recommended?

Yes, it remains a solid choice. Argon2id is the newer recommendation for new systems; scrypt and PBKDF2 are also acceptable with strong settings.

Is the Bcrypt Hash Generator free and private?

Yes. The Bcrypt Hash Generator is free, needs no account, and runs entirely in your browser. What you type is never sent to a server or stored.

All developer tools →