Which cost factor should I use?

10 is the modern default (~100ms on a server CPU). Use 12 for high-value secrets; 14 for offline-only secrets. Below 8 is too fast in 2026.

Why is cost 14 slow in my browser?

Each cost increment doubles the work. Cost 14 takes ~1–4s on a typical laptop — that's the point.

What's the difference between $2a$, $2b$, $2y$?

Format prefixes from different bcrypt implementations. All modern libraries verify all three interchangeably.

Is bcrypt still recommended in 2026?

Yes, with cost ≥10. Argon2id is preferred for new projects but bcrypt remains widely supported and safe at appropriate cost.

Bcrypt Hash & Verify

Bcrypt is the de-facto password hashing function for web apps — slow by design and salt-included. This tool generates bcrypt hashes with a cost factor between 4 and 14 (each step doubles the work) and verifies any existing hash against a candidate password. Uses `bcryptjs` in your browser; the password never leaves the page.

—

PasswordCost factor: 10Each step doubles the work. 10 is the modern default; 12+ for high-value secrets.

Output

—

How to use

Hash mode: type the password, choose cost (10 is the modern default), click generate.
Verify mode: paste a hash starting with `$2a$`, `$2b$`, or `$2y$`, type the candidate password, click verify.
Copy the hash.

Frequently asked questions

Which cost factor should I use?: 10 is the modern default (~100ms on a server CPU). Use 12 for high-value secrets; 14 for offline-only secrets. Below 8 is too fast in 2026.
Why is cost 14 slow in my browser?: Each cost increment doubles the work. Cost 14 takes ~1–4s on a typical laptop — that's the point.
What's the difference between $2a$, $2b$, $2y$?: Format prefixes from different bcrypt implementations. All modern libraries verify all three interchangeably.
Is bcrypt still recommended in 2026?: Yes, with cost ≥10. Argon2id is preferred for new projects but bcrypt remains widely supported and safe at appropriate cost.