What is bcrypt?
Bcrypt is a password-hashing function designed to be slow to compute, protecting against brute-force attacks.
← Back to all tools
Security
Bcrypt Generator & Checker
Generate and verify secure bcrypt hashes with a customizable cost factor. Great for securely hashing passwords, user authentication, and development.
Privacy
Tool workspace
How It Works
This tool generates bcrypt hashes entirely in your browser using bcryptjs. The plain text never leaves your device.
Use Cases
Useful for generating password hashes for test databases, or verifying that a plain text password matches a given hash.
Privacy First
All processing happens locally. No data is sent to our servers.
Limits
Passwords must be at most 72 UTF-8 bytes; longer input is rejected rather than truncated. Work factors are limited to 4–20 and higher values take exponentially longer to compute.
FAQ
Is it safe to use this tool?
Yes. This tool runs entirely client-side, meaning your plain text passwords are never transmitted over the internet.
What is the 'Work Factor'?
The work factor (or cost) determines how many iterations are used. Each increase in the factor doubles the time required to calculate a single hash.
Why is hashing slow?
Bcrypt is intentionally slow by design. This slowness is its primary defense against attackers trying to guess passwords rapidly.
Related tools
Security
Password Generator
Create configurable random passwords in your browser with clear length, character-set, reveal, copy, and strength-estimate controls.
Security
Hash Generator
Generate SHA-256 and SHA-512 digests locally in your browser. MD5 and SHA-1 are included only for legacy compatibility and are not collision-resistant.
Codes
UUID/GUID Generator
Generate random version 1 and 4 universally unique identifiers (UUIDs). Ideal for secure databases, robust software development, and reliable unique keys.