bcrypt Hash

bcrypt password hash generation and verification, implemented with PBKDF2 for compatible format.

Generate Hash

Verify Hash

Usage

About bcrypt

bcrypt is a hashing algorithm designed specifically for password storage. It has a built-in salt and an adjustable cost factor, making it resistant to rainbow tables and brute-force attacks. This tool uses the Web Crypto API's PBKDF2 algorithm to produce a bcrypt-compatible password hash format.

Hash Format

Generated hash format: $2a$<rounds>$<salt>$<hash>, where rounds is the cost factor, salt is the random salt, and hash is the hash result.

Steps

1. Enter a password. 2. Choose a cost factor (10-12 recommended; higher is more secure). 3. Choose a salt format (Base64 or Hex). 4. Click "Generate Hash". 5. To verify, enter the password and hash, then click "Verify".

Notes

A higher cost factor means slower computation and higher security. A value of 10-12 is recommended. Each hash generation uses a different salt, so the same password will produce different hashes, but all of them can be verified.