Bcrypt Hash Generator
Generate and verify bcrypt password hashes entirely in your browser. Choose a custom cost (work) factor, optionally supply your own 128-bit salt, and produce a standard 60-character $2b$ hash — or check a plaintext password against an existing bcrypt hash. The salt is drawn from the Web Crypto API and every operation is client-side only. Zero-Knowledge — nothing you type is transmitted, logged, or stored.
Each +1 doubles the work. 12 is a sensible modern default; raise it as hardware improves.
🔒 Zero-Knowledge — hashing runs in your browser. Nothing is transmitted.
Why Use This Bcrypt Hash Generator?
Bcrypt is an adaptive password-hashing function built on the Blowfish cipher by Niels Provos and David Mazières in 1999. Unlike fast digests such as MD5 or SHA-256, bcrypt is deliberately slow and tunable: a cost factor controls how many key-expansion rounds (2^cost) run per hash, so you can keep brute-force attacks expensive as hardware gets faster. Every hash embeds a unique 128-bit salt, which kills rainbow tables and guarantees identical passwords produce different hashes. Bcrypt protects a password — it does not create one. Its real-world strength still rests on the secret's own entropy, H = L × log₂(R), where H is entropy in bits, L is the password length, and R is the size of the character pool. Pair a high cost factor with a high-entropy password. This bcrypt hash generator runs client-side only — the salt comes from the Web Crypto API and your password never leaves the browser, so there is no data transmission to trust.
Tunable cost factor: drag the work factor from 4 to 16 and watch the live iteration count and time estimate update, so you can pick the slowest hash your login latency budget allows — the single most important bcrypt setting.
Custom salt control: let the Web Crypto API generate a fresh 128-bit salt automatically, or supply your own 22-character bcrypt-base64 salt to reproduce exact test vectors during development and CI.
Built-in verifier: paste an existing $2a/$2b/$2y hash and a candidate password to confirm a match in constant time — the same check your backend runs at login, without shipping the password to a server.
Zero-Knowledge by design: this generator is client-side only with no backend. The bcrypt computation happens in your browser's volatile memory, and you can prove it — open the Network tab and watch zero requests fire as you hash.
Algorithm transparency: choose the modern $2b prefix or legacy $2a for older stacks, see the full hash anatomy (version, cost, salt, checksum), and get warned when a password exceeds bcrypt's 72-byte input limit.
How to Use the Bcrypt Generator
- 1
On the Hash tab, type the password or string you want to hash.
- 2
Set the cost factor — 12 is a solid default — and optionally pick $2a or supply a custom salt.
- 3
Click Generate Hash; the 60-character bcrypt string appears with its anatomy, ready to copy.
- 4
To check a password, switch to the Verify tab, paste a hash plus a candidate password, and read the match result.
Frequently Asked Questions
Also try our Hash Generator for MD5, SHA-256, SHA-512 and HMAC digests — all computed client-side.
Related Tools
Password Generator
Generate strong, random passwords instantly.
Hash Generator
Hash text with MD5, SHA-256, SHA-512 and more.
Password Strength Checker
Test how strong your password really is.
PIN Generator
Generate secure numeric PIN codes.
Random Number Generator
Generate random numbers in any range.
UUID Generator
Generate v4 UUIDs for IDs and tokens.