Free Online Bcrypt Generator

Bcrypt is one of the most widely used algorithms for storing passwords. It is deliberately slow and adds a random salt to every hash, which makes brute-force and rainbow-table attacks expensive. QodeCat Bcrypt Generator creates bcrypt hashes and checks passwords against them without sending anything to a server.

• Hash: create a $2b$ bcrypt hash with a random salt.
• Cost rounds: choose 4 to 14 and see how long hashing takes.
• Verify: check whether a password matches a stored hash.
• Non-blocking: hashing runs asynchronously so the page stays responsive.

Why use this tool?

Debugging logins

When a user cannot log in, it helps to confirm whether a password really matches the hash in your database. Paste both into the Verify section and get a clear answer in a second.

Choosing a cost factor

Each extra round doubles the work. Use the timer to pick a cost that takes roughly 100 to 300 milliseconds on your hardware; that is slow for attackers but still fast enough for a login.

Frequently Asked Questions