Bcrypt Hash Generator
Create a salted bcrypt password hash in your browser, choose the cost factor, and copy the result without sending your password to a server.
Processed locally in your browser. Do not enter a production password on a shared or untrusted device.
Allowed range: 4–15. Higher costs take longer.
Enter a password to generate a bcrypt hash.
Your password and generated hash are not saved, uploaded, or sent to a third party.
A QUICK WALKTHROUGH
How to use this tool
- Enter a password only on a device and page you trust.
- Choose an integer cost factor from 4 to 15 and generate the hash.
- Copy the bcrypt hash, then clear the password field when finished.
Bcrypt is a password hashing function
Bcrypt is deliberately slow and salted, making it suitable for password storage when configured with an appropriate cost factor. It is not the same algorithm as SHA-256 or a general-purpose digest.
Cost factor
The cost factor is restricted to integers from 4 through 15. Higher values increase work and therefore take longer; choose a value appropriate for the system that will verify the hash.
Passwords are not saved
When an implementation is available, password processing should remain local to the browser. Never enter a real password into an untrusted page, and clear sensitive inputs after use.
GOOD TO KNOW
Common questions
Which cost factors are accepted?
This page accepts integer cost factors from 4 through 15.
Can SHA-256 be used instead?
No. SHA-256 is a different algorithm and is not a bcrypt replacement for password hashing.
Is my password stored or uploaded?
No. Hashing runs locally in your browser, and this page does not save or send the password. Do not enter a real production password on an untrusted page or device.
What should applications use for password storage?
Use a maintained server-side password hashing library and follow its guidance for bcrypt cost settings, salts, upgrades, and account recovery.