Generate bcrypt hashes with cost 8–14, verify passwords, and inspect the $2b$ rounds/salt/hash breakdown. Passwords stay local — never in shareable URLs.
For testing only. Use server-side bcrypt in production applications.
12 is recommended. Higher = slower but more secure.
Passwords are never stored or sent to any server. Processing runs entirely in your browser.
More free utilities you might find useful
Quick answers to common questions
12 is the default and a good balance for most apps. Use 10 for faster dev environments and 13–14 for higher security when server hardware allows.
Yes. Switch to the Verify tab, enter a password and bcrypt hash, and the tool checks if they match using bcrypt.compare.
Yes. Bcrypt is designed for password hashing with built-in salting and adaptive cost.
No. Hashing and verification run locally in your browser. Passwords are never stored in shareable URLs.
This tool is for testing and learning. Use server-side bcrypt libraries in production applications.
Your data is processed entirely in your browser. Nothing is sent to any server.