Bcrypt Hash & Compare

Bcrypt is a password-hashing algorithm designed to be deliberately slow — unlike a general-purpose hash like SHA-256, which is built for speed, bcrypt's cost factor (the "rounds" setting) can be tuned to keep hashing slow enough to make large-scale password-guessing attacks impractical, even as computers get faster. It's a standard choice for storing user passwords in a database: never store a password itself, only its bcrypt hash.

Each hash bcrypt generates includes its own random salt baked in, so hashing the same password twice produces two different-looking hashes — that's expected and correct. Higher round counts are more secure but slower to compute; 10-12 rounds is a common default for web applications today. Use the comparison tool below to check whether a plain-text password matches an existing bcrypt hash, the same check a login system performs.

Version 1.0.0