Bcrypt Hash Generator
Hash and verify passwords with bcrypt. Runs entirely in your browser — no data sent to servers.
🔒 Security Tools
Free
Browser-based
4 (fast)10 (recommended)14 (slow)
What Is Bcrypt?
Bcrypt is a password hashing function based on the Blowfish cipher, designed by Niels Provos and David Mazières in 1999. Unlike general-purpose hash functions (MD5, SHA-256), bcrypt is intentionally slow and includes automatic salting, making it ideal for storing passwords securely.
Understanding the Cost Factor
| Cost factor | Approx. hashes/sec (modern CPU) | Use case |
|---|---|---|
| 8 | ~2,000 | Testing / development only |
| 10 | ~500 | Standard web applications |
| 12 | ~125 | High-security applications |
| 14 | ~30 | Maximum security (slow logins) |
Bcrypt vs MD5 vs SHA-256
MD5 and SHA-256 are fast — billions of hashes per second on modern hardware — making them unsuitable for password storage. Bcrypt is designed to be slow. It also automatically embeds a unique salt in every hash, so two identical passwords produce different hashes, defeating rainbow table attacks.