Compute genuine OpenBSD bcrypt digests with selectable work factors (4–14) — interchangeable with every bcrypt library, so a hash made here verifies in your application and one made by your application verifies here. Checking a password performs a real bcrypt comparison, not a format check. Runs entirely in your browser without transmitting sensitive credentials.
Runs entirely in your browser
Bcrypt is a password-hashing function designed to be deliberately slow, which is exactly what you want for storing passwords: it makes large-scale guessing expensive. This tool computes genuine OpenBSD bcrypt digests with a selectable work factor (cost) from 4 to 14, and the output is interchangeable with every standard bcrypt library — a hash made here will verify in your application, and a hash made by your application will verify here.
The checker performs a real bcrypt comparison, not a superficial format check: it hashes the candidate password with the salt embedded in the existing hash and confirms whether they truly match. That makes it useful for debugging authentication, seeding a test user, or generating an htpasswd-style entry, all without wiring up a script.
The work factor is the key security dial. Each step up roughly doubles the time to compute a hash, slowing attackers but also your own logins, so it is chosen to be as high as your hardware comfortably tolerates. Everything runs in your browser, so the credentials you test are not transmitted — though as always, treat production password hashes with care.
TechToolsHQ is an independent, reader-supported tech platform. If this free tool saved you time, solved a problem, or helped your workflow, consider supporting our work. Your support helps us keep our utilities 100% free, private, and ad-free for everyone.