Free Online Bcrypt Hash Generator & Checker
Generate strong salted bcrypt password hashes instantly, or verify a password against an existing hash. All processing runs locally in your browser.
lock Password
verified Bcrypt Hash
lock Password
key Existing Hash
Key Features
Salted Hashing
Each hash includes a unique salt, making rainbow table attacks infeasible. No two hashes of the same password are ever identical.
Adjustable Cost
Control the work factor from 4 to 15. Higher values make hashing slower and more resistant to brute-force attacks.
Hash Verification
Easily verify passwords against existing bcrypt hashes to confirm correctness without re-encrypting.
Privacy Protected
All hashing runs entirely in your browser via bcryptjs. No passwords or hashes are ever sent to any server.
Frequently Asked Questions
Getting Started
What is bcrypt?
Bcrypt is a password hashing function designed by Niels Provos and David Mazières. It incorporates a salt to protect against rainbow table attacks and is adaptive — the work factor can be increased to keep up with faster hardware over time. It is the industry standard for secure password storage.
How do I use this tool to hash a password?
Select the "Generate Hash" tab, enter your password in the input field, choose a cost factor (4–15), and click "Generate Bcrypt Hash". The resulting hash string can be copied to your clipboard with the copy button.
How do I verify a password against a stored hash?
Switch to the "Verify Hash" tab, enter the password you want to check, paste the stored bcrypt hash into the hash field, and click "Verify". The tool will show "Match!" if the password matches the hash, or "Does not match" if it does not.
What does the cost factor do?
The cost factor (also called rounds) controls how computationally expensive the hashing process is. A cost of 10 means 2^10 = 1024 rounds of the key derivation function. Increasing the cost by 1 doubles the time required to compute a hash. A cost of 10–12 is recommended for most applications as of 2026.
Can I reverse a bcrypt hash back to the original password?
No. Bcrypt is a one-way hashing function — there is no mathematical operation that can recover the original password from the hash output. This is why it is used for password storage: even if the database is compromised, the original passwords remain protected.
What format does the bcrypt output use?
Bcrypt hashes follow the format: $2b$[cost]$[22-char-salt][31-char-hash]. For example: $2b$10$N9qo8uLOickgx2ZMRZoMyeIjZAgcfl7p92ldGxad68LJZdL17lhWy. The prefix $2b$ identifies the algorithm version, followed by the cost factor, salt, and hash encoded in base-64.