Your files stay on your device
bcrypt hash and verify
Hash a password with bcryptjs at a cost of 4 to 15 in a disposable worker, so a runaway cost costs a worker restart instead of a frozen tab. Verification reads the cost from the hash itself.
- bcrypt is password STORAGE, not transmission. It hides a password from the database, never from the wire. Use TLS first.
- Cost 12+ takes seconds on purpose: that is the protection. The worker can be killed if you regret cost 15.
- For new applications, Argon2id is the current recommendation where you can run it; bcrypt remains sound and everywhere.
- The password stays in this tab’s memory: never stored, never sent, and a tab cannot guarantee zeroization.
Paste, drop, or type to begin. Everything stays on this device.