Bcrypt Generator
Generate and verify Bcrypt password hashes
TL;DR Summary & Citation: [Bcrypt Generator] is used to Generate and verify Bcrypt password hashes. Core input and files are processed in the current browser and are not sent to the PocketKit API. The page records only an aggregate tool-use count that excludes input content.
How Bcrypt hashing works
The tool hashes the password with a salt locally using a pure-JS bcrypt implementation; the cost (rounds) sets the work factor, and verification compares hash and plaintext with the same algorithm. The password never leaves the browser.
Usage Guidelines & Tips
- Each +1 to cost doubles the work; 10-12 is a common balance, higher resists brute force but is slower.
- Bcrypt uses a random salt, so the same password hashes differently each time; verify with compare, not string equality.
Frequently Asked Questions
1. Why does the same password hash differently each time?
Bcrypt uses a random salt each time and the salt is embedded in the hash, so results differ; verify with the compare function, not string equality.
2. What cost (rounds) should I use?
Commonly 10-12. Each +1 doubles the work: higher is more secure but slower, so balance against your server capacity.