Running on your device · 0 bytes uploaded
bcrypt hash and verify
Hash a password with bcryptjs — cost 4 to 15 — in a disposable worker, so a runaway cost costs a worker restart instead of a frozen tab. Verification reads the cost from the hash itself.
- bcrypt is password STORAGE, not transmission — it hides a password from the database, never from the wire. Use TLS first.
- Cost 12+ takes seconds on purpose: that is the protection. The worker can be killed if you regret cost 15.
- For new applications, Argon2id is the current recommendation where you can run it; bcrypt remains sound and everywhere.
- The password stays in this tab’s memory — never stored, never sent, and a tab cannot guarantee zeroization.
Nothing in yet
Paste, drop, or type to begin. Everything stays on this device.
password in, worker-side bcrypt out