Best for
- Developers needing to quickly generate seed data hashes or check credentials during debugging without writing custom scripts
Privacy
Crucial security tool. Your plain-text passwords and hashes are processed purely in the browser. We cannot see them.
Quick tips
- 10-12 salt rounds are currently recommended for a good balance of security and performance.
- Increasing salt rounds exponentially increases the time it takes to compute the hash.
How to use this tool
- Choose whether you want to "Generate Hash" or "Verify Hash".
- For generating: enter a password, choose your salt rounds (default is 10), and copy the resulting hash.
- For verifying: enter both the plain password and the hash to see if they match.
Common questions
What is bcrypt?
Bcrypt is a password-hashing function designed to be computationally expensive, which protects against brute-force attacks.
Why do different hashes generate for the same password?
Bcrypt automatically generates and includes a unique "salt" every time you hash a password. This is normal and by design.