Bcrypt Generator
Hash passwords securely using Python bcrypt on the server.
Verify Password
Generate and verify bcrypt hashes online — fully local
Hash passwords with bcrypt and verify existing hashes without sending anything to a server. Everything runs in your browser, which makes this tool safe for checking real credentials during debugging.
Frequently Asked Questions
- What is bcrypt?
- Bcrypt is a password hashing function designed to be slow, which makes brute-force attacks expensive. It embeds a salt and a configurable cost factor directly in the hash string.
- What do the parts of a bcrypt hash mean?
- A hash like $2b$10$... contains the algorithm version (2b), the cost factor (10 = 2^10 iterations), then 22 characters of salt followed by the 31-character hash.
- What cost factor should I use?
- A cost of 10–12 is standard today. Higher is more secure but slower — aim for roughly 100ms of hashing time on your production hardware.
- Is it safe to paste a real password here?
- Hashing and verification run entirely in your browser via JavaScript — no network request is made. Still, prefer test credentials when possible as a general practice.