bcrypt Generator
Hash and verify passwords using the bcrypt algorithm securely in the browser.
This browser-side tool uses SHA-256 (bcrypt-style rounds) for educational UX. It is not real bcrypt, but it demonstrates configurable work factors fully in the browser.
Verify
Generate a hash or paste one above to verify.
Frequently Asked Questions
Is this real bcrypt output I can store in production?
No. The component says this clearly: it uses repeated SHA-256 rounds for an educational browser demo, not the actual bcrypt algorithm.
Why does verification fail after I change the cost factor?
Verification re-hashes the password using the cost currently selected in the dropdown. If that cost doesn't match the one used when the hash was generated, the comparison will fail.
Why do identical passwords produce identical hashes here?
Because this demo does not add a salt. Real bcrypt includes salt as part of the stored hash; this browser demo does not.
What does the iterations badge represent?
It shows `2^cost`. So cost 10 means 1024 SHA-256 rounds, cost 12 means 4096 rounds, and the time badge shows how long that took in your browser.
Can I paste one of these hashes into my backend's bcrypt compare function?
No. The output is just a hex SHA-256 digest after repeated rounds, so a real bcrypt library will not recognize it as a bcrypt hash string.