Bcrypt Hash Generator
Create bcrypt password hashes with a chosen cost, and check passwords against a hash.
5.0 (2 ratings)Bcrypt hashing runs on our server with PHP's password_hash(), the same function used by Laravel and WordPress. The entered text and hash are sent to the ToolzHive server for these operations. Use sample values rather than real passwords you use elsewhere.
Server processing
Hash generation and password verification send the entered text and hash to ToolzHive’s server. Use sample credentials rather than passwords you use elsewhere.
Read the privacy policyShare this tool
Found it useful? Send it to a friend or teammate.
Rate this tool
5.0
2 ratings
- 5 stars 2
- 4 stars 0
- 3 stars 0
- 2 stars 0
- 1 star 0
Clear instructions
Find steps, examples and limitations below.
Use online
Open the tool in a supported web browser.
Free to use
No sign-up required. Tool-specific limits may apply.
How to use the Bcrypt Hash Generator
Bcrypt is a password hashing function built to be slow, which makes guessing passwords from a stolen database extremely expensive. Each hash includes a random salt, so the same password gives a different hash every time. This tool creates bcrypt hashes with the cost factor you choose, using PHP's password_hash() like Laravel and WordPress, and checks whether a password matches an existing hash.
- 1 Enter the text or password and choose a cost factor; 10 to 12 is typical.
- 2 Click Generate hash and copy the result, which starts with $2y$.
- 3 To test a login, enter a password and a hash under "Check a password" and click Check match.
Example and practical tips
Hashing "secret" twice gives two different 60-character strings, both starting with $2y$10$, because each has its own random salt. Yet both verify as a match for "secret".
Checking is not decryption
Verification compares supplied text with a hash. It does not recover the original password. Use the Check match form with sample values when testing a workflow.
Frequently asked questions
Why is the hash different every time?
Bcrypt adds a random 128-bit salt to each hash and stores it inside the result, so identical passwords never share a hash. Verification reads the salt back out.
What cost factor should I use?
Choose the highest cost that keeps hashing under about 250 ms on your server; 10 to 12 is common. Each step up doubles the work.
Is there a password length limit?
Yes. Bcrypt only uses the first 72 bytes of input. The tool warns you if your input is longer.
Practical guides
-
How to Use Bcrypt Hash Generator
Generate a bcrypt hash or check whether sample text matches an existing hash. Choose a cost factor; hashing and verification run on ToolzHive’s server.
Report an issue
Something broken or not quite right? Tell us and we will look into it.