Best for
- Developers needing to quickly generate seed data hashes or check credentials during debugging without writing custom scripts
Privacy
Crucial security tool. Your plain-text passwords and hashes are processed purely in the browser. We cannot see them.
Quick tips
- 10-12 salt rounds are currently recommended for a good balance of security and performance.
- Increasing salt rounds exponentially increases the time it takes to compute the hash.
How to use this tool
- Choose whether you want to "Generate Hash" or "Verify Hash".
- For generating: enter a password, choose your salt rounds (default is 10), and copy the resulting hash.
- For verifying: enter both the plain password and the hash to see if they match.
Common questions
What is bcrypt?
Bcrypt is a password-hashing function designed to be computationally expensive, which protects against brute-force attacks.
Why do different hashes generate for the same password?
Bcrypt automatically generates and includes a unique "salt" every time you hash a password. This is normal and by design.
Related tools
Password GeneratorGenerate secure, random passwords with customizable optionsJWT Decoder & InspectorDecode JWT headers and payloads locally without sending tokens anywhereBase64 Encoder/DecoderEncode and decode data using Base64 encodingEXIF Viewer & StripperView and remove hidden EXIF metadata (GPS, camera info) from your photos locallyHash GeneratorGenerate MD5, SHA-1, SHA-256, and SHA-512 hashes from textPassword Strength CheckerTest password strength offline and see estimated crack times