BCrypt Generator
Generate and verify BCrypt password hashes online. Customize cost rounds and copy the hash — all in your browser.
Generate BCrypt Hash
Verify Password Against Hash
Advertisement — Below BCrypt Generator
What is BCrypt?
BCrypt is an adaptive password hashing function designed by Niels Provos and David Mazières in 1999. It's the gold standard for password storage in web applications.
Unlike simple hashing algorithms like MD5 or SHA-256, BCrypt is intentionally slow. Its cost factor (rounds) can be increased as hardware gets faster, ensuring that brute-force attacks remain impractical regardless of computing advances.
BCrypt automatically generates and incorporates a random salt, protecting against rainbow table attacks. The output format is: $2a$[cost]$[22-char salt][31-char hash]
BCrypt FAQ
How many rounds should I use?
Minimum 10 rounds. For high security, use 12-14. Each round doubles computation time.
Is BCrypt better than SHA-256?
For password hashing, yes. BCrypt is intentionally slow and includes a salt. SHA-256 is fast, which is bad for password hashing (easier to brute-force). Use BCrypt, scrypt, or Argon2 for passwords.
Is this tool safe?
Yes — runs entirely in your browser. For production, always hash server-side.