bcrypt Hash & Verify
Hash passwords with bcrypt or verify existing bcrypt hashes.
100% Private — Nothing is Uploaded
All processing happens locally in your browser. Your files never leave your device and are never sent to any server.
Note: bcrypt only uses the first 72 bytes of the password. Longer input is truncated.
Higher = more secure but slower. Recommended: 10–12.
About bcrypt
bcrypt is a password-hashing function designed to be slow, making it resistant to brute-force attacks. It includes a random salt and a configurable cost factor.
When to use bcrypt
- Hashing user passwords before storing them in a database.
- Verifying a login attempt against a stored bcrypt hash.
Cost factor
The cost factor is a power of 2. Each increment doubles the time to compute a hash. Common values:
- 10 — fast, acceptable for most sites.
- 12 — recommended today.
- 14+ — very slow, use only if your server can handle it.
Note: bcrypt only uses the first 72 bytes of the password. Longer passwords are truncated silently.