Bcrypt Hash Generator
Free online Bcrypt hash generator tool, verification supported
About Bcrypt Hash
Provides three bcrypt operations in one tool: generate a salted password hash with a configurable cost factor, verify a plaintext password against an existing hash, and extract the embedded metadata (version, cost, salt, hash) from a bcrypt string. Backed by the bcryptjs library, it produces standard $2a$ / $2b$-formatted hashes suitable for database storage and login comparison.
How to Use
1. Switch mode using the three tabs: Generate, Verify, or Extract. 2. Generate: enter a password, drag the cost factor slider (4-16), and click Generate Hash to produce the bcrypt string. 3. Verify: paste an existing hash and a candidate password, then click Verify - the result badge shows match or no-match. 4. Extract: paste a bcrypt hash and click Extract Info to see its version, cost factor, salt, and hash value.
Cost Factor & Work Factor
The cost factor (also called work factor) controls iterations as 2^cost - e.g., cost 10 = 1,024 rounds, cost 12 = 4,096, cost 14 = 16,384. The slider runs from 4 (fast, insecure) to 16 (slow, ~65k rounds). The tool shows the equivalent round count beside the slider. Cost 10-12 is typical for web apps today; raise it as hardware improves. Each generate call produces a fresh random 22-character salt, so the same password yields different hashes every time.
▶Why does the same password produce different hashes?
▶What cost factor should I use?
▶What is the difference between $2a$, $2b$, and $2y$?
▶Why does Verify report no-match instead of an error for a malformed hash?
Reference
If this tool has been helpful to you, consider buying me a coffee.
Buy me a coffee