BCrypt Hash Generator

Generate secure BCrypt hashes for password storage with customizable cost factor

Password strength:
BCrypt Options:
Higher = More secure but slower (4-15). Default: 10
Recommended: Cost factor of 10-12 for web applications. Each increment doubles the computation time.
✓ Security Best Practice: BCrypt automatically handles salt generation and is designed for password hashing. Unlike MD5/SHA, BCrypt is intentionally slow to prevent brute-force attacks.
Hash will appear here...
Each generation produces a unique hash (different salt) even for the same password
Verify Password (Optional):
Statistics:
Cost Factor: 10 | Estimated Time: ~100ms | Iterations: 1,024
What is BCrypt?

BCrypt is a password hashing function designed by Niels Provos and David Mazières, based on the Blowfish cipher. It's specifically designed for securely storing passwords.

Why Use BCrypt?
  • Adaptive: Cost factor can be increased as computers get faster
  • Salted: Automatically generates a random salt for each password
  • Slow by design: Intentionally computationally expensive to prevent brute-force attacks
  • Industry standard: Widely used and battle-tested for password storage
BCrypt Hash Format:
$2a$10$N9qo8uLOickgx2ZMRZoMyeIjZAgcfl7p92ldGxad68LJZdL17lhWy
 │  │  │                  │
 │  │  │                  └─ Hash (31 chars)
 │  │  └─ Salt (22 chars)
 │  └─ Cost factor (10 = 2^10 = 1,024 iterations)
 └─ Algorithm identifier
Cost Factor Guide:
Cost Iterations Approx Time Use Case
416~1msTesting only
8256~25msLow security
101,024~100msStandard (recommended)
124,096~400msHigh security
1416,384~1.6sMaximum security
Example:
Password: "mySecurePassword123"
BCrypt:   $2a$10$rZ5c.3SqZ8JqKvC5q1jH4.VfL0JdqE3Kx2yRl9Nv0qH7ZxPqWqYzG