Bcrypt Hash Generator
Create bcrypt password hashes with a chosen cost, and check passwords against a hash.
5.0 (1 rating)Bcrypt hashing runs on our server with PHP's password_hash(), the same function used by Laravel and WordPress. Nothing you enter is stored or logged, but avoid entering real passwords you use elsewhere.
Continue your work
- Password Generator — Create a strong password to hash.
- Passphrase Generator — Generate a memorable passphrase.
Rate this tool
5.0
1 rating
- 5 stars 1
- 4 stars 0
- 3 stars 0
- 2 stars 0
- 1 star 0
Share this tool
Found it useful? Send it to a friend or teammate.
Report an issue
Something broken or not quite right? Tell us and we will look into it.
Clear instructions
Find steps, examples and limitations below.
Use online
Open the tool in a supported web browser.
Free to use
No sign-up required. Tool-specific limits may apply.
How to use the Bcrypt Hash Generator
Bcrypt is a password hashing function built to be slow, which makes guessing passwords from a stolen database extremely expensive. Each hash includes a random salt, so the same password gives a different hash every time. This tool creates bcrypt hashes with the cost factor you choose, using PHP's password_hash() like Laravel and WordPress, and checks whether a password matches an existing hash.
- 1 Enter the text or password and choose a cost factor; 10 to 12 is typical.
- 2 Click Generate hash and copy the result, which starts with $2y$.
- 3 To test a login, enter a password and a hash under "Check a password" and click Check match.
Example and practical tips
Hashing "secret" twice gives two different 60-character strings, both starting with $2y$10$, because each has its own random salt. Yet both verify as a match for "secret".
Frequently asked questions
Why is the hash different every time?
Bcrypt adds a random 128-bit salt to each hash and stores it inside the result, so identical passwords never share a hash. Verification reads the salt back out.
What cost factor should I use?
Choose the highest cost that keeps hashing under about 250 ms on your server; 10 to 12 is common. Each step up doubles the work.
Is there a password length limit?
Yes. Bcrypt only uses the first 72 bytes of input. The tool warns you if your input is longer.