Generate bcrypt password hashes or compare a plain-text password against an existing hash, entirely in your browser.
Is this the same bcrypt used by my backend?
Yes — it uses a standard bcrypt implementation (bcryptjs), producing hashes fully compatible with bcrypt libraries in Node.js, PHP, Python, Ruby and more.
What are salt rounds?
Salt rounds (the cost factor) control how many times the hashing algorithm runs — higher rounds are slower but more resistant to brute-force attacks. 10–12 is a common default.
Does hashing happen on a server?
No, everything runs locally in your browser via WebAssembly-free JavaScript — your password and hash never leave your device.
Why did comparing fail with 'not a valid hash'?
Bcrypt hashes start with $2a$, $2b$ or $2y$ followed by the cost factor and a 53-character salt+hash — check you copied the full string.
Bcrypt Hash Generator
Higher rounds are slower to compute and harder to brute-force. 10–12 is a common default; above 13 can take several seconds in the browser.