Bcrypt Hasher

What is Bcrypt?

Bcrypt is a password-hashing function based on the Blowfish cipher. It incorporates a salt (random data) to defend against rainbow table attacks, and an adjustable cost factor that makes brute-force attacks progressively slower as hardware improves.

Unlike MD5 or SHA-256, Bcrypt is specifically designed for password storage — it is intentionally slow, making cracking computationally expensive. This is the industry standard for secure password hashing.

How to Use

1. Enter the password to hash in the input field.
2. Adjust the Cost Factor slider (higher = slower = more secure).
3. Click Generate Secure Hash.
4. Copy the resulting $2y$... Bcrypt hash.

Processing runs server-side — your password is never logged or stored. Cost 12 is recommended for production.

Cost Factor Guide

• Cost 4–6: Development/testing only
• Cost 10–12: Production standard (recommended)
• Cost 14–16: High-security applications
• Cost 18+: Maximum security (very slow)

Each increment doubles the computation time. Cost 12 takes ~250ms — fast enough for users, slow enough to deter attackers.