Bcrypt Hash Generator & Checker

Hash a password with bcrypt, or check a password against a bcrypt hash.

bcrypt hash

Examples

Questions

Why is the hash different every time?

bcrypt adds a new random salt each time, and the salt is stored inside the hash. Two hashes of the same password never match as text, but both check out against it.

What cost should I use?

Each step up doubles the time. 10 is the common default, 12 is a good choice for new systems today. Aim for a hash that takes about a quarter of a second on your server.

Why does a long password get a note?

bcrypt only reads the first 72 bytes of a password. Anything after that is ignored, so two long passwords that start the same way give the same hash.

How do I check a password?

Choose Check, type the password, and paste the hash into the Hash field. You can also put the hash on the line after the password.

What do $2a$, $2b$ and $2y$ mean?

They are versions of the format. $2b$ is current; $2a$ and $2y$ come from older or PHP versions and are checked the same way here.

Is my password sent anywhere?

No. Hashing and checking run in your browser, the password is hidden until you press Show, and there is no Share button.