Question 1

What is bcrypt?

Accepted Answer

Bcrypt is a password hashing function designed for security. Unlike fast hash functions like MD5 or SHA-256, bcrypt is intentionally slow — it uses a cost factor (work factor) to make brute-force and dictionary attacks computationally expensive. It is the standard choice for storing user passwords in databases.

Question 2

What does the bcrypt cost factor mean?

Accepted Answer

The cost factor (also called work factor or rounds) controls how slow bcrypt is. Each increment doubles the computation time: cost 10 takes ~100ms, cost 12 takes ~400ms, cost 14 takes ~1.5s. Higher cost means more security against cracking but slower login verification. The recommended minimum is 10; 12 is common for modern applications.

Question 3

Can I verify a password against a bcrypt hash online?

Accepted Answer

Yes. This tool lets you both generate a bcrypt hash from a plaintext password and verify a plaintext password against an existing hash. Verification uses the salt embedded in the hash itself — you do not need to store the salt separately. All processing happens in your browser; the password is never sent to any server.

Question 4

Is bcrypt safe for storing passwords?

Accepted Answer

Yes — bcrypt is one of the most trusted password hashing algorithms. It automatically generates and embeds a salt (preventing rainbow table attacks), is resistant to GPU-based cracking due to its memory-hard design, and the adjustable cost factor lets you keep pace with hardware improvements. Alternatives include Argon2id (winner of the Password Hashing Competition) and scrypt.

ابزارهای رایگان توسعه‌دهندگان وب

تولیدکننده / اعتبارسنج Bcrypt

پیکربندی

تولید هش

هش Bcrypt

تأیید

جزئیات هش

مولد bcrypt چگونه کار می‌کند

این ابزار چه کاری انجام می‌دهد

موارد استفادهٔ رایج برای توسعه‌دهندگان

قالب هش، ضریب هزینه و تجزیه

دام‌های رایج و حالت‌های لبه‌ای

چه زمانی از این ابزار استفاده کنیم در برابر کُد