Bcrypt Hash Generator
Generate bcrypt password hashes directly in your browser. Bcrypt is the gold standard for password hashing — it includes a built-in salt and adjustable cost factor that makes brute-force attacks exponentially harder. Use this tool to hash passwords for storage or to verify password hashes.
Frequently Asked Questions
›Why use bcrypt for passwords?
Unlike fast hashes like SHA-256, bcrypt is intentionally slow and includes a cost factor you can increase over time. This makes brute-force and dictionary attacks impractical. It also automatically generates and embeds a random salt.
›What cost factor should I use?
A cost factor of 10-12 is standard for most applications (each increment doubles the computation time). Use 12+ for high-security applications. The right value is whatever takes about 100-250ms on your server hardware.
›Is the bcrypt hash computed locally?
Yes. The bcrypt computation runs entirely in your browser. Your password is never transmitted or stored anywhere.