bcrypt Hash Generator – Generate bcrypt Online (Free Tool)

Generate bcrypt password hashes entirely in your browser — the industry-standard way to store passwords safely. The cost factor (work factor) is configurable so you can tune the trade-off between security and login latency. Every hash includes a unique salt, so identical passwords produce different hashes.

• Works on desktop, tablet, and mobile in any modern browser
• Stable behavior across visits — no surprise version drift
• Your data stays private — all processing happens locally in the browser
• Built for developer workflows: copy-friendly output, syntax-aware highlighting where useful
• Works with very large inputs (multi-megabyte JSON, long regex patterns, big tables)

1. Type or paste the password
2. Choose salt rounds (10-12 recommended for production)
3. Click Generate — hash appears with embedded salt
4. Copy the hash and store it in your user database

• Hashing passwords before storing in a user database
• Generating test fixtures for authentication code
• Migrating from a weaker hash (MD5/SHA-1) to bcrypt
• Benchmarking server-appropriate cost factor
• Generating hashes for CTF / security training exercises

Hashing takes several seconds

Cost factor is too high. Each +1 doubles compute time. 10-12 is standard; 14+ becomes noticeable on every login.

Two hashes of the same password look different

That's correct — bcrypt uses a random salt per hash. Verification still works because the salt is embedded in the hash string.

Hash starts with `$2a$` instead of `$2b$`

Both are valid bcrypt prefixes. `$2b$` is the modern variant; `$2a$` is legacy but still verified by all major libraries.