Running on your device · 0 bytes uploaded

# bcrypt hash and verify

Hash a password with bcryptjs — cost 4 to 15 — in a disposable worker, so a runaway cost costs a worker restart instead of a frozen tab. Verification reads the cost from the hash itself.
HashVerifyPasswordCost factor (15 max — each +1 doubles the time)45678910111213Hash

- bcrypt is password STORAGE, not transmission — it hides a password from the database, never from the wire. Use TLS first.
- Cost 12+ takes seconds on purpose: that is the protection. The worker can be killed if you regret cost 15.
- For new applications, Argon2id is the current recommendation where you can run it; bcrypt remains sound and everywhere.
- The password stays in this tab’s memory — never stored, never sent, and a tab cannot guarantee zeroization.
Nothing in yet

Paste, drop, or type to begin. Everything stays on this device.

password in, worker-side bcrypt out

## Next door in Crypto

- [Password strength](/crypto/password-strength)
- [Hash generator](/crypto/hash)
[All crypto tools](/crypto)

---

Canonical HTML: https://nutter.tools/crypto/bcrypt
Markdown version: https://nutter.tools/crypto/bcrypt/index.md
Plain-text version: https://nutter.tools/crypto/bcrypt/index.txt
Agent index: https://nutter.tools/llms.txt