Skip to content

Bcrypt Generator

Hash a password with bcrypt, or check one against an existing hash.

Mode

Quick Tool Overview

The Bcrypt Generator hashes a password at a cost you choose, or checks a password against an existing hash. The implementation is verified against the output of server-side bcrypt, and runs entirely in your browser.

What it does
Generates and verifies bcrypt password hashes
You give it
A password, and optionally an existing hash
You get back
A 60-character bcrypt hash, or a match verdict
Best for
Seeding a user, and debugging a failing login
Developer Tools Free, unlimited use No sign-up Runs in your browser

About the Bcrypt Generator

bcrypt is the password hash to use when you have no strong reason to use Argon2. It is deliberately slow, the cost is adjustable so it can be made slower as hardware improves, and it generates and stores its own salt inside the hash — so two identical passwords never collide.

The cost factor is the whole point. It is a power of two, so cost 12 does four times the work of cost 10. Pick the highest value your server can absorb at your login rate; 12 is a reasonable default in 2024 and takes a few hundred milliseconds. The verify mode is just as useful as generating: paste a hash from your database and a candidate password to confirm the two match, which is the quickest way to debug a login that keeps failing.

Key features of the Bcrypt Generator

Verify mode

Paste a hash from your database and a candidate password to see whether they match — usually faster than adding logging to find out why a login fails.

Adjustable cost

Choose the work factor and see how long it actually took, so you can pick the highest value your login endpoint can absorb.

Every prefix

$2y$, $2a$ and $2b$ are all supported and all interchangeable, so a hash from PHP verifies against one from Go or Node.

Honest about the 72-byte limit

bcrypt truncates at 72 bytes — and bytes, not characters — and the tool warns when a password crosses that line.

Nothing is uploaded

The whole algorithm runs in your browser, so a real password is never transmitted.

How to use the Bcrypt Generator

  1. 1

    Choose hash or verify

    Hash a new password, or check a password against a hash you already have.

  2. 2

    Set the cost

    12 is a sensible default. Higher is slower and stronger; the tool shows how long it took.

  3. 3

    Pick the prefix

    $2y$ is what PHP writes, $2a$ and $2b$ are what most other languages produce. They are interchangeable.

  4. 4

    Copy the hash

    The 60-character result goes straight into a database column.

Frequently asked questions

The highest your login endpoint can absorb. 12 is a common 2024 default and takes a few hundred milliseconds; 10 is the floor. Measure it on your own hardware rather than guessing.

Reviews of the Bcrypt Generator

What people who use the Bcrypt Generator think of it. Reviews come from visitors and are posted as written.

No ratings yet

Yours would be the first.

  • 5 0 reviews rated 5 stars
  • 4 0 reviews rated 4 stars
  • 3 0 reviews rated 3 stars
  • 2 0 reviews rated 2 stars
  • 1 0 reviews rated 1 star

Write a review

Used this tool? Your rating helps the next person decide.

Your rating

Plain text only — links, email addresses and HTML are not accepted. Your name and review are shown publicly; nothing else is collected. See the privacy policy.

0 reviews

Newest first

No reviews yet

Be the first to rate the Bcrypt Generator. It takes half a minute and no account.

Write the first review

More developer tools