Loading…
Loading…
Security tool
Hash passwords with bcrypt and verify existing hashes. Client-side with bcryptjs — free and private.
Bcrypt Tool hashes passwords and verifies them against existing bcrypt digests ($2a$ / $2b$ style) using bcryptjs entirely in your browser. Adjust the cost factor, generate salts automatically, and experiment with password hashing without sending secrets to a remote bcrypt API.
Bcrypt is a password hashing function designed to be deliberately slow and salted. Unlike fast hashes (SHA-256 alone), bcrypt includes a work factor (cost) that you can raise as hardware improves, making brute-force guessing expensive. Each hash embeds the algorithm version, cost, salt, and digest in a single string you can store in a database.
This page runs bcryptjs client-side: hashing and compare both happen on your device. Cost is clamped to a practical browser range (about 4–15) so the tab stays responsive—production servers often use similar defaults (commonly 10–12) but you should pick cost based on your latency budget and threat model, not only this UI. Higher cost means stronger resistance and slower hashing.
Honesty matters: local processing means your password is not uploaded for the hash operation itself, but you should still never paste live production user passwords, root credentials, or production database dumps into any third-party website. Use this tool for learning, local experiments, and non-production samples. For real systems, hash on your trusted server or offline tooling under your control.
ezToolFlow is operated by Vishvajeet Shukla. For privacy details on browser tools, accounts, and AI features, read our Privacy Policy.
Use Hash to create a new bcrypt string from a password, or Verify to check a password against an existing $2… hash.
Pick a cost factor (10 is a common web default). Enter a test password—prefer non-production samples.
Hashing returns a full bcrypt string with embedded salt. Verify returns match / no match. Copy results only into safe destinations.
See how cost changes runtime and how the resulting $2a$/$2b$ string is structured for storage.
Check whether a known test password matches a hash from documentation or a non-production fixture.
Try costs around 10–12 in the browser to get a qualitative sense of latency before configuring a server.
Show teammates why passwords must not be stored as plain text or plain SHA digests.
Tip: after you finish, check Related tools at the bottom of this page for the next step in your workflow.
Quick answers about tools, privacy, limits, and pricing.
Yes. Daily operation limits may apply for guests and free accounts.
No. Hashing and verification run entirely in your browser with bcryptjs.
10 is a common default for web apps. Higher values (12–14) are stronger but slower. Values above 15 are capped here to keep the browser responsive.
No. Hash and verify run in the browser with bcryptjs. Your input is not uploaded for the bcrypt operation itself.
No. Bcrypt is one-way password hashing with salt and cost. You verify by hashing the candidate and comparing—you cannot “decrypt” a bcrypt string back to the password.
No. Even though processing is local, never paste production user passwords, admin secrets, or live credential dumps into third-party sites. Use synthetic test data.
Bcrypt’s design intentionally burns CPU. In a browser tab, very high costs can freeze the UI—that is expected, which is why cost is limited here.
Yes. Bcrypt Tool is free to use on ezToolFlow. Guests and free accounts may have daily limits on some tools; premium tiers can raise or remove those limits. AI tools may also spend credits.
For browser-based tools, processing runs on your device when possible and files are not uploaded for conversion. Optional accounts, usage limits, and AI features are described in our Privacy Policy.
No for most tools — you can start as a guest. An account helps keep higher daily limits and saved work (for example AI resumes).
Keep working with similar free tools — no signup required for most.
Create strong, secure passwords with custom rules
Open toolGenerate SHA-1, SHA-256, SHA-384 & SHA-512 hashes from any text
Open toolSHA-256 hash of any file in-browser
Open toolScore password strength with tips
Open toolGenerate secure random tokens
Open toolGenerate time-based OTP codes locally
Open tool