Generate bcrypt password hashes with cost 4 to 15 and verify a password against an existing hash. Hashing runs in your browser, so passwords are never sent to a server.
Updated
/ 5 - Be the first to rate this tool Thanks for rating!
Verification failed - please try again.
Quick check
Please verify you're not a robot to submit your rating.
Give feedback
Tell us what you think about Bcrypt Hash Generator and Verifier.
Generate hash
Bcrypt only uses the first 72 bytes of the password; anything beyond that is ignored.
Verify password
Bcrypt only uses the first 72 bytes of the password; anything beyond that is ignored.
- Runs in your browser — passwords are never sent to a server
- Choose cost rounds from 4 to 15; every hash gets a fresh random salt
- Verify a password against any $2a$, $2b$ or $2y$ hash
How it works
-
1
Set the options — length, quantity, character set, or template.
-
2
The result generates instantly in your browser.
-
3
Regenerate as many times as you like.
-
4
Copy the result to your clipboard.
Why use this tool
Every dev utility, one place
Format, convert, encode, decode, and generate — no more juggling ten tabs.
100% private, always
Every tool runs in your browser — your code and data are never sent anywhere.
Works on any device
Runs on Windows, Mac, Linux, iOS, and Android — nothing to install.
Instant results
No queues, no build step — results update as you type.
Built to handle real data
Full Unicode support and RFC-compliant parsing, edge cases included.
Free, always
Free to use, with no rate limits, sign-up, or trial period.
Frequently asked questions
No. Hashing and verification run in your browser; nothing you type is uploaded.
Every bcrypt hash includes a new random salt, so two hashes of one password differ. Verification still matches because the salt is stored inside the hash.
Cost 10 to 12 is a common choice. Each step doubles the work, so higher costs are slower to crack but also slower to check on login.
Yes. Bcrypt only uses the first 72 bytes of the input; anything longer is ignored, and the tool warns when your password exceeds that.
From the blog
Reading a JWT Without Trusting It: Claims, Expiry, and the Signature Trap
Decoding a JWT takes a second. Verifying one is a different job entirely — and confusing the two is how auth bugs ship. Here is how to read a token safely while you debug.
Mastering Base64: What It Is, How It Works, and When Not to Use It
Base64 is everywhere in modern web development, from data URIs to authentication headers. Here is a deep dive into how it works and common pitfalls to avoid.
Demystifying JSON: How to Troubleshoot Common Parsing Errors
JSON is the backbone of web APIs, but syntax mistakes can halt your code. Here is how to identify and fix missing commas, unescaped strings, and trailing characters.
Related tools
Generate a .gitignore file online
Pick languages, frameworks, and editors to instantly build a combined .gitignore file, in your browser.
Generate MD5 and SHA hashes online
Compute MD5, SHA-1, SHA-256, SHA-384, and SHA-512 hashes of any text in your browser.
HMAC Generator
Generate HMAC signatures with SHA-1, SHA-256, SHA-384 or SHA-512 using a UTF-8 or hex secret key, output as hex or Base64. Computed in your browser, so your key never leaves it.
Generate Lorem Ipsum placeholder text
Generate paragraphs, sentences, or words of Lorem Ipsum placeholder text instantly in your browser.
Generate a Markdown table online
Paste comma-separated rows to instantly get a formatted Markdown table, in your browser.
Generate a strong random password
Generate a cryptographically random password with adjustable length and character sets, in your browser.
Generate QR codes in bulk for free
Create multiple QR codes at once from a list of URLs or text.
Encode or decode ROT13 and Caesar cipher text
Shift letters by any amount, including the classic ROT13, instantly in your browser.
Convert text case online
Convert text to camelCase, PascalCase, snake_case, kebab-case, Title Case, UPPER, and lower, instantly in your browser.
AIChat with a PDF using AI
Ask questions about a PDF and get answers grounded in its content.
Convert Unix file permissions
Convert between octal (e.g. 755) and symbolic (rwxr-xr-x) file permission notation, in your browser.
Calculate a subnet from CIDR notation
Get the network address, broadcast address, subnet mask, and usable host range for any CIDR block, in your browser.