Bcrypt Generator
Hash passwords with bcrypt or check a hash.
Runs locally with bcryptjs; nothing is sent to a server.
How to use
- 1Choose Generate hash or Check password.
- 2Enter the password.
- 3Pick a cost factor (10–12 is typical), or paste the hash to check.
- 4Copy the hash, or see whether the password matches.
Frequently asked questions
Why does the hash change every time?
Bcrypt adds a random salt to each hash. Different hashes of the same password all verify correctly.
What cost factor should I use?
10–12 for most web apps. Each step doubles the time, which slows down attackers too.
Does it support $2y$ hashes from PHP?
Yes. $2a$, $2b$ and $2y$ hashes can be checked.
Is there a password length limit?
Bcrypt uses only the first 72 bytes of a password; the tool warns you if yours is longer.
Is my data uploaded?
No. Everything runs in your browser; nothing you paste is sent to a server.
You may also need
AES Encryption
Encrypt and decrypt text with a password (AES-256).
TOTP Generator
2FA codes and authenticator QR for testing.
.gitignore Generator
Combine .gitignore templates and download.
Git Cheat Sheet
Searchable Git commands with explanations.
URL Parser
Split URLs, edit query params, build UTM links.
JSON Formatter
Format, validate and minify JSON.