Free Bcrypt Hash Generator
The Bcrypt Generator creates bcrypt password hashes with a salted, slow key derivation — the recommended way to store passwords. It runs entirely in your browser using a local bcrypt library.
bcrypt is deliberately slow, which is exactly what makes it right for passwords — verify an existing hash with the bcrypt Checker and grade the plaintext in the Password Strength Checker. Unlike MD5, it is built to resist brute force.
How to use the Bcrypt Hash
- 1 Enter the password you want to hash.
- 2 Set the cost factor — 10 to 12 is the usual range for web applications.
- 3 Generate the hash, which will look like $2y$12$… with the cost and salt embedded.
- 4 Copy the full hash into your database; never store the original password.
How to Use
Enter a password, choose a cost factor (higher is slower but safer), and generate the hash. You can also verify a password against an existing hash.
- Salted bcrypt hashing (cost 4–15)
- Verify a password against a hash
- Fully client-side
Frequently asked questions
Why use bcrypt instead of SHA-256 for passwords?
Because it is deliberately slow and salted. A fast hash lets an attacker test billions of guesses per second on a stolen database; bcrypt is tunable so each guess takes a measurable slice of time, and the per-password salt means precomputed rainbow tables are useless.
What does the cost factor do?
It sets how many rounds of key expansion run, as a power of two. Raising it by one doubles the work for both you and an attacker, so it is the knob you turn as hardware gets faster. Too high and logins become noticeably slow — 10 to 12 is a common balance today.
Why does the same password give a different hash each time?
Because a fresh random salt is generated for every hash and stored inside the output. That is the point: two users with the same password get completely different hashes, so cracking one tells an attacker nothing about the other.
Related Security & Cryptography Tools
You might also need
Tools from other categories that people pair with the Bcrypt Hash: