Skip to content

Bcrypt Hash & Verify

Hash passwords with bcrypt at a chosen cost factor, and verify a password against a hash.

Hash a password

Verify a password

How to use the Bcrypt Hash & Verify

  1. Enter a password.

  2. Choose a cost factor and hash.

  3. Or paste a hash to verify.

What is bcrypt?

bcrypt is a password-hashing function designed to be deliberately slow, with a tunable cost factor, so brute-forcing stored passwords is impractical. It also salts automatically. This tool generates bcrypt hashes and verifies a password against an existing hash, all in your browser.

Key features

  • Generate bcrypt hashes
  • Adjustable cost (work) factor
  • Verify a password against a hash
  • Automatic salting

Frequently asked questions

What cost factor should I use?

10–12 is a common balance of security and speed; higher is more secure but slower.

Why is the hash different each time?

bcrypt generates a random salt per hash, so the same password yields different hashes — verification still works.

Is this safe to use with real passwords?

Hashing runs locally, but for production always hash on your server, never the client.