Bcrypt Password Hash Generator
Description
Generate secure Bcrypt hashes for passwords with adjustable cost factor. Perfect for secure password storage in applications.
About Bcrypt Password Hash Generator
The Bcrypt Generator hashes passwords with the bcrypt algorithm in your browser, using an adjustable cost factor. Bcrypt is deliberately slow and salts every hash automatically, which makes large-scale guessing attacks expensive — exactly what you want for storing passwords. Generate a hash to seed a test user, verify your application's settings, or learn how cost affects hashing time.
How to use
- Type the password you want to hash into the input.
- Choose a cost factor (work factor) — higher is slower and more resistant to brute force.
- The bcrypt hash is produced, including its embedded salt.
- Copy the hash; bcrypt's format stores the cost and salt, so no separate salt column is needed.
Frequently asked questions
What cost factor should I use?
Pick the highest value your server can tolerate for login latency — commonly 10–12 today. Each increment doubles the work, so cost 12 is twice as slow as 11.
Why does the same password produce a different hash each time?
Bcrypt generates a random salt per hash and embeds it in the output. Different salts mean different hashes for the same password — which is the point. Verification re-derives the salt from the stored hash.
Do I need to store the salt separately?
No. The salt and cost are part of the bcrypt hash string itself (the $2b$... prefix), so storing the single hash value is enough to verify later.
Is bcrypt still recommended?
Yes, it remains a solid, widely supported choice. Argon2 and scrypt are also strong modern options; the key principle is to use a slow, salted, purpose-built password hash rather than a fast general hash like SHA-256.