Skip to content

Hash & verify with bcrypt

Hash a password with bcrypt (salt + rounds), or verify a password against an existing hash.

Mode

Higher = safer but slower. 10 is a good default.

Features

How it works

  1. Pick Hash mode and type the password you want to protect.
  2. Set the rounds (cost factor) — 10 is a solid default; higher is safer but slower — then click Hash.
  3. Switch to Verify mode to test a password against an existing $2a$/$2b$ hash and see Match or No match.

Frequently asked questions

How do I generate a bcrypt hash?
Pick Hash mode, type the password, set the rounds (cost factor), then click Hash. The tool generates a fresh random salt and returns a standard $2a$/$2b$ bcrypt hash you can copy.
What cost factor (rounds) should I use?
10 is a solid default. Higher values (up to 14) are more resistant to brute-force but slower to compute; the tool reports the compute time in milliseconds so you can balance security and speed.
Can I verify a password against an existing bcrypt hash?
Yes. Switch to Verify mode, paste an existing $2a$/$2b$ hash and a candidate password, and the tool shows Match or No match — all client-side, so the password never leaves your browser.

Your files never leave this page

Every conversion runs entirely in your browser using WebAssembly. There is no upload, no server-side processing, no analytics, and no cookies. Open DevTools → Network during the operation and you will see zero outbound traffic.

Related tools

Topics covered