Bcrypt Tools
Generate, verify, or inspect bcrypt strings locally, with bounded real-computation fixture generation.
Advanced Options
Generate one or more independently salted hashes; fixture mode is limited to 20.
How to use
Choose Generate to hash the entered password with a fresh random salt, Verify to compare it with a bcrypt string, Inspect to parse a string without a password, or Fixtures to compute hashes from synthetic random secrets.
Example
Limitations
Passwords over 72 UTF-8 bytes are rejected instead of silently truncated. Costs are limited to 4–12, fixtures to 20, and supplied hashes above cost 12 are rejected before work. Inspecting structure does not verify a password.
Frequently Asked Questions
Why does the generated bcrypt string change?
Each generation uses a new secure random salt. Different strings can all verify the same password.
Does fixture mode invent bcrypt-looking text?
No. It performs real bcrypt computations over synthetic random secrets and does not retain or reveal those secrets.
Is the password stored?
No. Password input is processed locally and is not placed in URLs, logs, downloads, or persistent storage.