Bcrypt Password Hash Generator & Verifier
Hash and verify passwords with the bcrypt standard.
About this tool
Bcrypt has protected passwords since 1999 and is still an excellent choice. Built on the Blowfish cipher, it is deliberately slow and includes a tunable cost factor: each increment doubles the work, so you can keep hashing expensive for attackers as hardware improves. The salt is generated and embedded automatically.
This tool both hashes new passwords and verifies a password against an existing $2b$ hash — useful for debugging authentication. Everything runs in your browser via the bcryptjs library; nothing is transmitted.
Like everything on encrypt.tools, this runs entirely in your browser — nothing you enter is transmitted or stored.
Frequently asked questions about Bcrypt Hasher
What cost factor should I use for bcrypt?+
A cost of 10–12 is typical in 2026. Higher is more secure but slower; aim for roughly 250ms per hash on your server hardware. Each +1 doubles the computation time, so measure before going above 12.
Does bcrypt have a password length limit?+
Yes — bcrypt only uses the first 72 bytes of the password. Longer passwords are silently truncated. If you need to accept very long passphrases, pre-hash them (e.g. with SHA-256) before bcrypt, or use Argon2 which has no such limit.
How do I verify a password against a hash?+
Switch to verify mode, paste the bcrypt hash and the candidate password, and the tool reports a match or mismatch. The salt and cost are read from the hash string itself.
Related tools
PBKDF2 Derivation
Derive keys from passwords with salt and iterations
ARGON2 · MEMORY-HARDArgon2 Hasher
The password-hashing competition winner, memory-hard
SCRYPT · N/r/pScrypt Calculator
Memory-hard key derivation with tunable N, r, p
NTLM · WINDOWSNTLM Hasher
The MD4-based hash Windows stores for local accounts