bcrypt is intended for password hashing, but this browser tool is for testing and migration—not production credential handling. bcrypt considers at most 72 input bytes.
How to use this bcrypt hash generator
- Enter a test password on a trusted device.
- Choose a cost factor from 4 to 14 and explicitly select Run bcrypt.
- Store the complete hash string, which already includes its version, cost and salt.
bcrypt format and cost
A bcrypt string contains the version marker, two-digit cost, 22-character encoded salt and the hash result. Increasing cost by one approximately doubles the work, so this page limits the setting to a browser-safe range and never runs automatically.
| Section | Example meaning |
|---|---|
$2b$ | bcrypt version |
10$ | Cost factor 10 |
| Next 22 characters | Random salt embedded in the result |
Worked example
At cost 10, selecting Run bcrypt hashes the entered password with a new random salt. Repeating the same password normally produces a different string; both can verify correctly because each result carries its own salt.
bcrypt questions
Does bcrypt add a salt?
Yes. A cryptographically random salt is generated for every run.
Why does the button take time?
bcrypt is deliberately slow, and higher cost factors multiply its work.
Can I paste a live password here?
Avoid live credentials in browser utilities. Use this page for testing on a trusted device.