Bcrypt Hash Generator
Hash text with bcrypt, and verify text against an existing hash.
What is Bcrypt?
Bcrypt is a slow-by-design password hashing algorithm built on the Blowfish cipher. Unlike a fast general-purpose hash, bcrypt includes a "cost factor" that controls how many rounds of internal processing it performs, deliberately making each hash take longer to compute — which makes large-scale password-guessing attacks far more expensive for an attacker.
How to use it
- Enter the text you want to hash and choose a cost factor.
- Click Generate Hash; higher cost factors take visibly longer, which is the intended trade-off.
- To check a value against an existing hash, use the verify panel below — it returns a simple match or no-match result.
Bcrypt automatically generates and embeds a random salt in every hash it produces, which is why hashing the same text twice gives two different-looking results, both of which will still verify correctly. This is the standard way to store passwords server-side: never store a plain password, store its bcrypt hash, and use the verify step to check a login attempt. This page runs the well-known bcrypt.js library entirely in your browser, so text you hash here is never uploaded anywhere — that said, for real production systems, hashing should happen on your server, not in a client-side browser tool.