Bcrypt Hash Generator
Generate a real bcrypt password hash in your browser, with a configurable cost factor - genuine bcrypt output, not a placeholder.
Enter a password and choose a cost factor - this tool runs the real bcrypt algorithm in your browser and shows the standard hash string.
Higher costs are slower to compute (roughly double the time per +1) and more resistant to brute-force. 10-12 is a common practical default; values above 12 may take a few seconds in the browser.
Computed using a real bcrypt implementation running entirely in your browser - your password is never transmitted anywhere.
Higher cost factors are slower to compute (by design) - this makes brute-forcing harder, but also makes your own hashing take longer. 10-12 is a common practical default.
What Is Bcrypt?
Bcrypt is a widely-used password hashing algorithm built on the Blowfish cipher, designed to be deliberately slow (via its "cost factor") to resist brute-force attacks - it automatically handles salting and produces a self-contained hash string like $2b$12$....
Why Use This Tool?
Useful for testing, understanding bcrypt's output format, or generating a hash to manually insert somewhere during development - without needing to spin up a script or server just to run bcrypt once.
How to Use It
- Enter a password.
- Choose a cost factor (higher = slower to compute = more resistant to brute-force).
- Click Generate - a real bcrypt hash is computed and shown.
- Copy the resulting hash string.
Understanding the Output
The hash string encodes the algorithm identifier, cost factor, salt, and hash together (e.g. $2b$12$saltsalt...hashhash...) - this is why bcrypt hashes are self-verifying without needing to store the salt separately.