Hash passwords with bcrypt or verify passwords against existing hashes.
Bcrypt is a password-hashing function designed in 1999, based on the Blowfish cipher. Unlike fast hashes (MD5, SHA-1), bcrypt is intentionally slow — and tunable — to resist brute-force attacks. Each hash includes a random salt, so identical passwords produce different hashes.
The cost factor (4–31) controls iteration count: 2^cost rounds. A cost of 10 is ~100ms per hash on modern hardware. As hardware speeds up, increase cost over time — 12 by 2030 is a common projection.
It controls how many times the hashing algorithm iterates internally — higher rounds mean slower hashing and stronger resistance to brute-force attacks, at the cost of more CPU time per hash.
No — bcrypt hashing and verification both run entirely in your browser using JavaScript; nothing is transmitted.
Yes — paste the hash and the plaintext password into the verifier and it confirms whether they match.
Want more detail? Read How to Use Bcrypt Generator: Practical Guide and Best Practices.