Bcrypt Verifier

Check whether a password matches a bcrypt hash and inspect the version, cost and salt it carries.

Verify a bcrypt hash

Verdict: —

Version: —

Cost: —

Salt: —

The comparison runs locally against the standard bcrypt algorithm; your password never leaves the page.

Common questions about the free online bcrypt verifier.

Paste the hash, type the password and read the verdict. The tool extracts the salt and cost from the hash and recomputes the digest locally.

It means the password reproduces exactly the same digest with the same salt and cost, so the stored hash belongs to that password.

The standard 60 character modular crypt format with a 2a, 2b or 2y version marker, a two digit cost, a 22 character salt and a 31 character digest.

Bcrypt is deliberately slow. The cost factor sets how many key setup rounds run, and higher costs take proportionally longer to verify.

No. Verification only tests a guess you already have. Bcrypt cannot be reversed, and brute force is expensive by design.

The calculation happens entirely in your browser, so nothing is sent anywhere, but treat password hashes as secrets and avoid public computers.

If the string is not 60 characters or carries an unknown version marker, the tool cannot read the salt and cost, so it reports an invalid hash.

Yes. It is completely free, works offline once loaded, and needs no account, no sign-up and no installation.

Last updated: October 10, 2026