How do I use this bcrypt hash generator?

Open Hash mode, enter a password, choose cost rounds, and click Generate bcrypt hash. Copy the `$2a$...` result. Everything runs in your browser - nothing is uploaded.

Can I verify a bcrypt hash here?

Yes. Switch to Verify, paste the modular crypt hash and the candidate password, then click Verify password. You get a clear match or mismatch result.

Is my password uploaded to a server?

No. Hashing and verification use bcryptjs only in this tab. Passwords and hashes are not sent to ToolsMinify or any third party.

What are bcrypt rounds (cost factor)?

Rounds set the work factor: each step roughly doubles hashing time. Common defaults are 10 or 12. This tool allows 4-15 so the page stays usable in a browser.

Why does the same password produce different hashes?

bcrypt embeds a random salt in every hash. That is expected - use Verify mode to check a password against a specific stored hash.

Does bcrypt truncate long passwords?

Yes. Classic bcrypt only uses the first 72 UTF-8 bytes. This tool shows a byte count and warns when you go over that limit.

How is this different from the Hash Generator?

The Hash Generator computes SHA / HMAC digests for any text. This page is for bcrypt password hashes with salt and cost, plus verify - the usual shape for stored credentials.

Should I use this for production password storage?

Use it to generate fixtures and understand cost. Production apps should hash on the server with a maintained library and never log plaintext passwords. Client-side hashing here is for local testing only.

Developer Tools

Bcrypt Hash Generator

Hash a password with bcrypt or verify a candidate against an existing `$2a$` / `$2b$` hash - entirely in your browser.

Hashing and verification run in your browser. Passwords and hashes never leave this tab. Open SHA Hash Generator

Mode

Password

0 UTF-8 bytes (bcrypt uses the first 72)

Cost rounds

Higher rounds are slower and harder to brute-force. Values above 12 can freeze the tab for a few seconds.

Bcrypt hash

About Bcrypt Hash Generator

Hash a password with bcrypt or verify a candidate against an existing `$2a$` / `$2b$` hash - entirely in your browser. This free bcrypt hash generator uses bcryptjs with a configurable cost factor (rounds), so you can match common defaults (10) or raise the work factor for harder hashes. Salts are generated per hash, so the same password never produces the same string twice. Nothing is uploaded: passwords and hashes never leave this tab. Pair it with the Hash Generator for SHA digests, or the Password Generator when you need a strong secret first.

How to Use Bcrypt Hash Generator

Choose Hash or Verify. Hash is the default.
For Hash: enter a password, pick cost rounds (4-15, default 10), and click Generate bcrypt hash.
Copy the modular crypt string (`$2a$10$...`). Each run uses a fresh salt.
For Verify: paste a bcrypt hash and the candidate password, then click Verify password.
A match or mismatch result appears on the page. Nothing is uploaded to a server.

Bcrypt Hash Generator Examples

Hash a local test password

Enter a fixture password, leave rounds at 10, and copy the `$2a$10$...` string into a seed file or .env.example. Re-hashing the same password yields a different string because the salt changes.

Verify a stored bcrypt hash

Paste a hash from your user table into Verify mode with the candidate password. Match means the password is correct for that hash; mismatch means it is not.

Raise the cost factor

Set rounds to 12 for a slower, harder hash when staging production-like auth. Higher rounds take longer in the browser - stay at or below 15.

Catch the 72-byte limit

Type a long passphrase over 72 UTF-8 bytes. The tool warns that bcrypt only hashes the first 72 bytes, matching OpenBSD bcrypt behavior.

Reject a SHA hash by mistake

Paste a hex SHA-256 digest into Verify. The tool reports an invalid bcrypt hash instead of a false mismatch, so you know the format is wrong.

Common Use Cases

Generate bcrypt hashes for local fixtures and seed data
Verify a password against a stored `$2a$` / `$2b$` hash offline
Tune cost rounds before wiring bcrypt into an app
Confirm a hash from a dump without sending passwords to a server
Compare bcrypt password hashing with SHA tools on the same site

Frequently Asked Questions about Bcrypt Hash Generator

How do I use this bcrypt hash generator?: Open Hash mode, enter a password, choose cost rounds, and click Generate bcrypt hash. Copy the `$2a$...` result. Everything runs in your browser - nothing is uploaded.
Can I verify a bcrypt hash here?: Yes. Switch to Verify, paste the modular crypt hash and the candidate password, then click Verify password. You get a clear match or mismatch result.
Is my password uploaded to a server?: No. Hashing and verification use bcryptjs only in this tab. Passwords and hashes are not sent to ToolsMinify or any third party.
What are bcrypt rounds (cost factor)?: Rounds set the work factor: each step roughly doubles hashing time. Common defaults are 10 or 12. This tool allows 4-15 so the page stays usable in a browser.
Why does the same password produce different hashes?: bcrypt embeds a random salt in every hash. That is expected - use Verify mode to check a password against a specific stored hash.
Does bcrypt truncate long passwords?: Yes. Classic bcrypt only uses the first 72 UTF-8 bytes. This tool shows a byte count and warns when you go over that limit.
How is this different from the Hash Generator?: The Hash Generator computes SHA / HMAC digests for any text. This page is for bcrypt password hashes with salt and cost, plus verify - the usual shape for stored credentials.
Should I use this for production password storage?: Use it to generate fixtures and understand cost. Production apps should hash on the server with a maintained library and never log plaintext passwords. Client-side hashing here is for local testing only.

Hash Generator

Generate SHA-256, SHA-1, SHA-384, and SHA-512 hashes from any text. HMAC lives on the same page. Get the lowercase hex digest instantly in your browser - nothing is uploaded.

Password Generator

Generate strong, random passwords in your browser. Choose length (8-64) and mix uppercase, lowercase, numbers, and symbols. Built on secure crypto randomness - nothing is uploaded or stored.

JWT Decoder

Decode JWT header, payload, and signature in your browser. Encode HS256 test tokens on the same page. Free JSON Web Token decoder - nothing uploaded.

UUID Generator

Generate UUID v4, UUID v7, ULID, or NanoID in your browser. Create one or many IDs for databases, APIs, and testing - nothing is uploaded.