Bcrypt Generator & Checker
Hash a password the way your app stores it — or check that a password matches a hash.
- Your data never leaves your device
- 100% free
- No sign-up
- Works offline after first load
How to generate a bcrypt hash
- Type a password and choose bcrypt or Argon2id with its cost.
- Copy the hash — or switch to Verify or Inspect.
- Paste a hash to check a password or read its settings.
About Bcrypt Generator
Generate bcrypt and Argon2id password hashes with any cost, verify a password against a hash, and inspect a hash’s version, cost and salt.
It works in your browser for speed and privacy, remembers your settings on this device, and every result can be copied, downloaded or shared.
Good for
- Seeding user databases and fixtures
- Debugging login problems
- Choosing a hashing cost
Tip: Store the whole hash string in a single column of at least 60 characters (bcrypt) or 100 (Argon2).
Frequently asked questions
Which cost should I use?
Pick the highest cost that keeps hashing between about 100 ms and 1 second on your server — usually 10–12. The tool shows how long each hash takes.
Why does the same password give different hashes?
Every hash uses a new random salt stored inside it, so identical passwords look different. Both still verify.
What is the difference between $2a$, $2b$ and $2y$?
They are the same algorithm with version tags from different implementations: $2y$ is used by PHP and Apache, $2b$ by most others. The checker accepts all of them.
Should I use Argon2id instead?
Argon2id is the modern recommendation because it is memory-hard. bcrypt is still fine and widely supported; note that bcrypt ignores anything after 72 bytes.
Are my passwords uploaded?
No. Hashing and verification run in your browser — passwords are never uploaded, logged or put in share links.