Generate a Bcrypt Hash
Powered by WebAssembly • 100% Local, Never Transmitted
Bcrypt is a password-hashing function designed specifically to be slow — unlike general-purpose hashes like SHA-256, its computation cost is tunable via the "cost factor," which is exactly what makes it well-suited for storing passwords: an attacker trying to brute-force guesses has to pay that same cost for every single attempt, which makes large-scale guessing impractical even with modern hardware.
The actual bcrypt computation here runs via WebAssembly — a bcrypt implementation compiled from C directly into a WASM binary, rather than a JavaScript reimplementation, giving performance much closer to a native bcrypt library. A fresh random salt (16 bytes, generated with your browser's cryptographically secure random number generator) is created for every hash, which is why hashing the exact same password twice always produces two different — but equally valid — hash strings.
This tool is meant for testing, debugging, or learning how bcrypt hashes are structured (for example, verifying a hash pulled from a database, or generating a test hash for a login flow you're building) — not for building the actual authentication layer of a production app, which should use a proper server-side bcrypt library instead.
Nothing is transmitted anywhere — hashing and verification both run locally in this browser tab.