bcrypt Hash Generator – Free Online Utility

Generate and verify bcrypt password hashes with custom salt cost.

Higher is slower
Fast (4)Recommended (10-12)Very Slow (15)

Understanding bcrypt Hashing

bcrypt is a widely respected password hashing function. Unlike standard hash functions like MD5 or SHA-256, which are designed to be fast, bcrypt is intentionally "slow" to compute.

This slowness is its greatest strength. By making the hashing process take a fraction of a second instead of nanoseconds, it becomes exponentially more difficult for attackers to perform brute-force or rainbow table attacks.

Why the Cost Factor Matters

The cost factor (or rounds) allows you to tune how much work is required to compute the hash. As computer hardware becomes faster, developers can increase the cost factor to keep the hashing process slow enough to remain secure.

Using metatool.in, this computation happens entirely in your browser using a Web Worker, so your browser window won't freeze while it's working.

Frequently Asked Questions

bcrypt is a password-hashing function designed by Niels Provos and David Mazières. It is based on the Blowfish cipher and incorporates a salt to protect against rainbow table attacks and an adaptive cost factor to stay resistant to brute-force attacks even as hardware gets faster.
The cost factor determines how many iterations the hashing algorithm performs. Increasing the rounds by 1 doubles the time it takes to compute the hash. A value of 10-12 is currently standard for most applications.
SHA-256 is designed to be fast, which is good for data but bad for passwords because an attacker can test millions of guesses per second. bcrypt is deliberately slow (adaptive), making brute-force attacks much more difficult and expensive.

Related Free Tools