Bcrypt Hash Generator
Generate and verify bcrypt password hashes with a configurable cost factor. Server-side processing.
Frequently asked questions
What is bcrypt?
Bcrypt is a password hashing function designed to be slow and resistant to brute-force attacks. The cost factor (rounds) controls how slow it is — a higher cost means more computation required to crack it.
What cost factor should I use?
A cost of 10-12 is recommended for most applications. Higher values (13+) increase security but also increase server CPU time per authentication. Test what your hardware can handle in under 250ms.
Is my password sent to your server?
Yes — bcrypt hashing requires server-side computation. The password is sent over HTTPS, hashed, and the hash is returned. The password is not stored or logged.