Bcrypt Generator
Enter a password, then generate a bcrypt hash or verify it against an existing one — free, private, and processed entirely in your browser.
About the Bcrypt Generator
Bcrypt is the standard way to store passwords securely — unlike a plain hash (MD5, SHA-256), it's deliberately slow and includes a random salt built into every hash, which is exactly what makes it resistant to the fast brute-force attacks a plain hash is vulnerable to. This tool generates a bcrypt hash from any password, and can also verify a password against an existing hash.
Adjust the salt rounds (cost factor) to control how slow — and therefore how resistant to brute-forcing — the hash is. Everything runs locally in your browser; your password is never sent anywhere.
How to Generate a Bcrypt Hash
Step 1
Enter your password
Type the password you want to hash, or verify against an existing hash.
Step 2
Set your salt rounds
Choose the cost factor — higher is slower to compute, and more resistant to brute-forcing.
Step 3
Copy your hash
Copy the generated bcrypt hash, or see a clear match/no-match result when verifying.
Frequently Asked Questions
Why use bcrypt instead of a plain SHA-256 hash for passwords?
Bcrypt is deliberately slow and includes a unique random salt in every hash automatically, making large-scale brute-force and rainbow-table attacks impractical — a plain fast hash like SHA-256 is designed for speed, exactly the wrong property for storing passwords.
What are salt rounds, and what should I set them to?
The cost factor controls how many times the hashing algorithm repeats internally — higher means slower and harder to brute-force. 10-12 is a common default balancing security and performance.
Can I check if a password matches an existing bcrypt hash?
Yes — switch to verify mode, enter the password and the existing hash, and get a clear match or no-match result.
Is my password sent anywhere?
No. Hashing and verification both happen entirely in your browser.