Bcrypt Hash & Verify Online — Cost 4–14
Hash a password with bcrypt (cost 4–14) or verify a hash in your browser. Warns when input exceeds the 72-byte bcrypt limit. Not production auth scaffolding.
Developer notes
• Modes: hash (password + cost → $2…) or verify (password + hash → match / no-match). • Cost outside 4–14 is rejected (no silent clamp). • bcrypt truncates passwords after 72 UTF-8 bytes — UI warns when exceeded. • Uses bcryptjs via dynamic import. • Not Argon2/scrypt; not a production auth skeleton.
Options
When teams pick this route
• Generate fixture hashes for local tests. • Spot-check a stored bcrypt hash against a candidate password. • Learn cost factors without spinning up a backend.
Worked examples
Hash a password
Before
After
Verify
Before
After
Related tools
Generate random passwords with password-generator. For keyed message auth (not passwords) use hmac-generator. Hub: security tools.
Bcrypt FAQ
Hash & verify
Is bcrypt “unbreakable”?
No. Bcrypt is a slow password hash with a work factor — not a guarantee. Use your app’s recommended hasher and policies.
Why warn at 72 bytes?
bcrypt silently truncates after 72 UTF-8 bytes. Longer passwords still run, but only the first 72 bytes matter.
Is this production authentication?
No. This is a local helper for fixtures and debugging — not an auth product or secure login system.
Security & tokens
JWKS, X.509 certificates, and secrets scan — browser-local.
Explore other tool categories
Minify
Shrink code and assets for production — minify JavaScript, CSS, HTML, JSON and XML before gzip or CDN deploy.
Beautify
Make code readable with consistent indentation — beautify JavaScript, CSS, TypeScript, SCSS, LESS, Markdown, GraphQL, SQL, YAML and more in your browser.
Unminify
Expand minified or compressed code — unminify JavaScript, CSS, TypeScript, SCSS, LESS, SQL, YAML and other formats when debugging or reviewing.
Conversion
Transform data between JSON, YAML, XML and CSV locally — no server uploads.
CSS preprocessors
Compile SCSS or LESS to standard CSS in the browser — pair with beautify or minify for a full stylesheet workflow.
JSON Tools
Validate, format, diff and explore JSON payloads — complementary to minifiers and converters.
SVG Tools
Preview, optimize with SVGO, export Data URI, resize, beautify, convert to JSX and validate SVG — all in your browser.
DevOps & Infra
Terraform HCL format/validate/minify, Dockerfile format & lint, Docker Compose and .env validation.
CI/CD
GitHub Actions and GitLab CI — format YAML and check workflow/job structure in your browser.
Logs & observability
Line-oriented JSON/NDJSON and Nginx/Apache access logs — format, filter, validate, and CSV/TSV.
Kubernetes
Multi-doc manifests, structural validate, Ingress/Deployment starters, and Helm values formatting.
Networking / IP
CIDR, subnets, and IPv4/IPv6 helpers — in your browser.
API & schemas
OpenAPI tools to format, validate, and lint your specs.
Encoding
Encode or decode Base64, URL components and HTML entities — client-side only.
Developer utilities
Timestamps, UUID, ULID, Nanoid, cron, passwords, regex, slugify, number bases, case, text diff, and chmod — all client-side.
Text & Markdown
Count words, build Markdown TOCs, and clean line lists — all in your browser.
Serialization
Serialize and deserialize PHP data structures beside JSON workflows.