Running on your device · 0 bytes uploaded

bcrypt hash and verify

Hash a password with bcryptjs — cost 4 to 15 — in a disposable worker, so a runaway cost costs a worker restart instead of a frozen tab. Verification reads the cost from the hash itself.
HashVerifyPasswordCost factor (15 max — each +1 doubles the time)45678910111213Hash

- bcrypt is password STORAGE, not transmission — it hides a password from the database, never from the wire. Use TLS first.
- Cost 12+ takes seconds on purpose: that is the protection. The worker can be killed if you regret cost 15.
- For new applications, Argon2id is the current recommendation where you can run it; bcrypt remains sound and everywhere.
- The password stays in this tab’s memory — never stored, never sent, and a tab cannot guarantee zeroization.
Nothing in yet

Paste, drop, or type to begin. Everything stays on this device.

password in, worker-side bcrypt out

Next door in Crypto

- Password strength (/crypto/password-strength)
- Hash generator (/crypto/hash)
All crypto tools (/crypto)

Canonical HTML: https://nutter.tools/crypto/bcrypt
Markdown version: https://nutter.tools/crypto/bcrypt/index.md
Plain-text version: https://nutter.tools/crypto/bcrypt/index.txt
Agent index: https://nutter.tools/llms.txt