What is the recommended Bcrypt cost factor?

Bcrypt Hash Generator & Verifier

Security & Privacy

In-browser Bcrypt hash generator and password verifier. Hash passwords with customizable cost work factors (4 to 14 rounds) and verify password matches against existing $2a$ / $2b$ Bcrypt hashes 100% client-side.

100% Client-Side

100% In-Memory Crypto Execution

Plain-Text Password:

Cost Factor (Salt Work Rounds): 101,024 Iterations

Zero-Knowledge Privacy Guarantee

This Bcrypt Hash Generator & Verifier executes 100% locally in your browser’s JavaScript memory using client-side Web APIs. No inputs, keys, tokens, files, or outputs are ever uploaded to any server or logged in any database.

Key Features & Capabilities

Bcrypt password hash generator with configurable work factor (4-14 rounds)
Instant password verification against $2a$ / $2b$ / $2y$ hashes
Benchmarked execution time estimate per round
100% client-side: sensitive passwords are never sent over the network

How to Use This Tool

1Type your plain-text password and choose salt rounds (default 10).
2Click "Generate Hash" to produce the standard Bcrypt hash.
3Switch to the "Verify Hash" tab to test if a candidate password matches an existing hash.

Frequently Asked Questions (FAQ)

A cost factor of 10 to 12 is recommended for modern web applications to provide strong protection against GPU brute-force attacks.

More in Security & Privacy

Explore category

HMAC Signature Generator

Generate HMAC-SHA256, HMAC-SHA512, and HMAC-SHA1 signatures locally with custom secret keys.

HTML Entity Encoder & Decoder

Encode and decode HTML entities to prevent XSS injection and render special characters safely.

X.509 Certificate & CSR Inspector

Inspect PEM SSL/TLS certificates and CSRs locally to view Common Name, SANs, Issuer, and Expiry.