Security
Password Hash
Type the text to hash, set the bcrypt cost from 1 to 20, then generate the hash. Paste a bcrypt hash and the original text to see whether they match.
Quick start
- 1
Enter the text
Type the password you are allowed to hash. Only the first 72 bytes are used.
- 2
Set the cost
Choose a round count from 1 to 20. Twelve is the usual production start.
- 3
Generate
Copy the salted bcrypt hash.
- 4
Verify
Paste a bcrypt hash and the original text to see whether they match.
Features
Bcrypt hash
Generate a salted bcrypt hash. Twelve rounds is the usual production starting point.
Cost factor
Raise or lower the rounds. More rounds are slower and harder to guess.
Verify
Check a pasted bcrypt hash against the original text.
Specifications
- Algorithm
- bcrypt
- Rounds
- 1–20, default 12
- Limit
- First 72 bytes are hashed
- Privacy
- Processed on the toolbox API
Use cases
- Produce a bcrypt hash for a fixture.
- Check that a stored hash matches a password.
- See how cost changes the wait.
Frequently asked questions
Why might a long password not match?
Bcrypt hashes the first 72 bytes only. Anything past that is ignored.
Is the hash the same every time?
No. Each generate call uses a new salt, so two hashes of the same text differ. Verify still matches.