What cost factor should I use?

10-12 rounds is a common default; higher values are more secure but slower to compute and verify.

Is my password sent anywhere?

No, hashing and verification run locally in your browser using the bcryptjs library.

Why does the hash change every time?

Bcrypt includes a random salt in every hash, so hashing the same password twice produces different (but equally valid) results.

Bcrypt Hash Generator

Generate and verify bcrypt password hashes with adjustable cost.

Works Offline

Privacy First

No Login

No API

Cost factor (rounds)

Password to hash

Bcrypt hash

Verify a password against a hash

Password

Bcrypt hash

About the Bcrypt Hash Generator

Hash passwords with bcrypt at a chosen cost factor and verify any password against an existing bcrypt hash. Hashing runs asynchronously in your browser so the UI stays responsive even at high cost factors.

Examples

Hash a password

correct horse battery staple

Output

$2a$10$...

Related tools

AES Encrypt/Decrypt

Encoders & Crypto

Encrypt or decrypt text with AES-GCM and a passphrase.

Base32 Encoder

Encoders & Crypto

Encode or decode text using RFC 4648 Base32.

Base64 Encoder

Encoders & Crypto

Encode or decode text to/from Base64, UTF-8 safe.

Basic Auth Header Generator

Encoders & Crypto

Build or decode an HTTP Basic Authorization header.

Checksum Comparator

Encoders & Crypto

Hash text or a file and compare against an expected checksum.

File Hash Calculator

Encoders & Crypto

Compute SHA-1/256/384/512 digests of a local file.

Frequently asked questions

Version 1.0.0 · Updated 2026-08-10 · Runs entirely in your browser