bcrypt Generator
Hash a password with bcrypt entirely in your browser. Pick a cost factor, generate the hash, and see how long it took. Nothing is uploaded.
Generate hash
Secure · localResult
Verify a hash
About bcrypt Generator
The bcrypt Generator hashes a password with bcrypt in your browser, letting you choose the cost factor and see how long it took. It is for developers learning or testing password hashing, with nothing uploaded.
bcrypt is a deliberately slow hash designed for storing passwords safely. Generating a hash locally lets you experiment with cost factors and timing without sending a password anywhere.
Step by step
- Enter the password you want to hash.
- Choose a cost factor; higher values are slower and harder to brute-force.
- Generate the bcrypt hash.
- Note the time it took, which reflects the cost factor.
- Copy the hash for your test or comparison.
What it offers
- bcrypt hashing with adjustable cost factor
- Timing feedback per hash
- Runs in the browser — bcrypt
- Nothing uploaded
Where it helps
- Learning how bcrypt cost factors affect hashing time
- Generating a test hash to verify a login implementation
- Comparing bcrypt timing on your hardware
- Demonstrating password hashing in a tutorial
Tips for best results
- Pick a cost factor that takes a noticeable fraction of a second on your server hardware.
- Do the real hashing server-side; this tool is for learning and testing.
- Remember bcrypt is one-way — you verify by hashing the input and comparing, not by decrypting.
Pitfalls to watch for
- Choosing a cost factor so low that hashing is fast and therefore weaker against brute force.
- Treating bcrypt as encryption; it is a one-way hash and cannot be reversed.
- Hashing passwords in client-side code for production, where the work belongs on the server.
Why people use it
Adjustable work
The cost factor tunes how slow and resistant the hash is.
Tangible timing
See the cost factor’s effect in milliseconds.
Private
Passwords are hashed on your device.
Educational
A hands-on way to understand slow hashing.
Common questions
This runs entirely in your browser
No file or text you enter here is uploaded. Encoding and decoding happen on your device using native browser APIs — close the tab and nothing remains on a server.