Santekno/toolsCategoriesTutorials

Bcrypt Verifier

Check whether a password matches a bcrypt hash. Inspects variant ($2a/$2b/$2y) and cost factor.

Processed in your browserUpdated · Jan 2026
Input
0 charspassword
Output
0 chars

How to use Bcrypt Verifier

Paste your input on the left, choose the options you want, and the output appears instantly on the right. Everything runs in your browser — none of your data is sent to a server.

  • Paste or type your input in the INPUT panel
  • The output regenerates automatically as you type
  • Use Copy to put the result in your clipboard
  • Click Sample to load a working example

What is Bcrypt Verifier?

Bcrypt Verifier takes a bcrypt hash and a candidate password, then reports whether they match plus useful metadata: the variant ($2a, $2b, or $2y), the cost factor (4–14), and whether the hash format is well-formed. Verification runs entirely in your browser via `bcryptjs` — neither the password nor the hash is sent to any server. Use this to debug authentication flows, verify migrated user records, or confirm a password reset. This tool is part of santekno's developer toolbox — a curated collection of utilities built for engineers who care about speed, privacy, and simplicity.

Common use cases

  • Debugging API payloads and integration issues
  • Inspecting tokens, hashes, or encoded strings during development
  • Generating fixtures and sample data for tests
  • Sharing readable output with teammates in code reviews

FAQ

A logarithmic work factor — cost 10 means 2^10 (1024) key derivation rounds. Each +1 doubles compute time. Use 10–12 in production.