Bcrypt Hash Generator & Verifier
Generate secure salted Bcrypt password hashes ($2a$) or verify plaintext passwords against existing hashes locally. · Updated
Sensitive tool. Nothing you enter here is saved or shared: no drafts, history, or links. Everything runs in this browser tab.
Options
Mode:
Cost / Salt Rounds (4 - 14):
Inputtext
json
Options
| Option | Description |
|---|---|
| Mode | Select whether to generate a new salted Bcrypt hash or verify a candidate password. |
| Cost / Salt Rounds (4 - 14) | Work factor log2 iterations. 10 to 12 is standard for modern web authentication. |
| Hash to verify | The Bcrypt hash to check the password against. Leave empty to enter the password on line 1 and the hash on line 2. |
FAQ
Is it safe to generate or test passwords with this tool?
Yes. All salt generation, hashing, and verification run strictly in your browser memory via pure JavaScript (bcryptjs). No passwords or hashes are ever sent across a network.
What cost factor / round is recommended?
A cost factor of 10 to 12 is recommended for modern web applications, providing a good balance between hashing security against brute-force attacks and server latency.
Related tools
Hash Generator
Generate cryptographically secure SHA-256, SHA-512, SHA-1, and MD5 message digests client-side.
JWT Generator
Generate and sign JSON Web Tokens (JWT) using HMAC-SHA256, HMAC-SHA384, or HMAC-SHA512.
JWT Decoder
Decode JSON Web Tokens (JWT) client-side. Inspect header claims, payload data, expiration times, and token signatures.
UUID / ULID / NanoID
Generate or inspect UUID v4/v7, ULID, and NanoID identifiers in bulk — cryptographically random, fully offline.