BCrypt Generator
Generate a BCrypt hash from text, with a configurable cost factor.
How to use the BCrypt Generator
- Enter the text or password you want to hash.
- Set the cost factor. 10 to 12 is a common choice; each step doubles the work.
- Click Run to generate the bcrypt hash.
- Store the whole string: it already contains the algorithm, cost and salt.
How the BCrypt Generator works
Bcrypt is a password-hashing function designed to be deliberately slow. It generates a random 128-bit salt and runs the expensive Blowfish key setup 2cost times, so a cost of 12 performs 4,096 rounds. Raising the cost by one doubles the time needed, which lets you keep pace with faster hardware.
The output looks like $2a$12$ followed by 53 characters: the version, the cost, a 22-character salt and the 31-character hash. Because the salt is random, hashing the same password twice gives different results, and verification reads the salt back out of the stored hash. Bcrypt only uses the first 72 bytes of input.
Frequently asked questions
- Is this tool free?
- Yes. Generate BCrypt hashes at no cost, with no account required.
- Why does this run on the server?
- BCrypt hashing is deliberately slow and computationally expensive, which is best handled server-side rather than blocking your browser.
- What does the cost factor control?
- It sets how many rounds of hashing are performed - higher values are slower to compute but more resistant to brute-force attacks. 10-12 is a common default.