Question 1

What is bcrypt used for?

Accepted Answer

Bcrypt is a password-hashing function designed to be deliberately slow so it resists brute-force attacks. You store the bcrypt hash instead of the password, so even if your database leaks the real passwords stay protected. This tool generates a bcrypt hash and verifies a password against an existing hash.

Question 2

What is the cost factor?

Accepted Answer

The cost (work factor) sets how many rounds of hashing are applied, and each increment doubles the work. Higher is more secure but slower; 10 to 12 is the common range for web apps.

Question 3

Is my password uploaded?

Accepted Answer

No. Hashing and verification run entirely in your browser with a vendored bcrypt library, so your password never leaves your device.

Bcrypt Generator & Verifier