Bcrypt Hash Generator & Verifier

What is Bcrypt?

Bcrypt is a cryptographic password-hashing function designed by Niels Provos and David Mazières in 1999, based on the Blowfish cipher (RFC 2898 / OpenBSD). Unlike general-purpose hash algorithms such as MD5 or SHA-256—which were engineered for speed—Bcrypt was specifically created to be intentionally slow and computationally expensive.

Every Bcrypt hash output encapsulates three critical parameters in its 60-character ASCII representation:

1. Identifier Prefix: $2a$, $2b$, or $2y$ denoting the schema version.
2. Cost Factor: A two-digit exponent (e.g., 10) representing $2^{\text{cost}}$ key-expansion iterations ($2^{10} = 1,024$ rounds).
3. Salt and Ciphertext: A 128-bit cryptographically secure random salt concatenated with the 184-bit ciphertext digest.

How to Use This Tool

Generating a Bcrypt Hash:

1. Enter Password: Type or paste your plaintext password into the input field.
2. Adjust Salt Rounds: Select a cost factor between 4 and 14 (10 is the recommended industry default for web applications).
3. Click Generate: Click Generate Bcrypt Hash to compute the salted digest.
4. Copy Output: Click 📋 Copy Hash to copy the 60-character result into your database seed scripts or testing environment.

Verifying a Password:

1. Switch to the Verify Password Match tab.
2. Enter the plaintext candidate password in the first field.
3. Paste the existing Bcrypt hash (starting with $2a$, $2b$, or $2y$) into the second field.
4. Click Verify Password Match to perform a constant-time comparison.