Bcrypt Format Demo

Inspect bcrypt-like string structure and demonstrate a non-interoperable password-hash format.

Updated September 22, 2026

What is the Bcrypt Format Demo?

This is a format demonstration, not a bcrypt implementation . Its generated strings are derived with PBKDF2 and only resemble bcrypt-formatted text; they are not real bcrypt hashes and are not compatible with bcrypt libraries or stored account hashes. The tool can parse the shape of a pasted bcrypt string, but that format check does not prove the digest is valid. Its password comparison only works with this demo's own output and must not be used to verify real bcrypt hashes. Do not use generated values for account passwords or production systems. For real bcrypt hashing and verification, use a maintained bcrypt library in your application.

This page demonstrates the shape of a bcrypt string. It does not calculate bcrypt: generated output is derived with PBKDF2 and is not interoperable with bcrypt implementations. The inspector checks whether pasted text resembles the expected bcrypt structure and displays its version-like prefix and cost field. This is a format check only; it does not validate that the salt or digest is correct. The comparison mode is only meaningful for output generated by this demo. It cannot verify real bcrypt hashes. Do not use this tool's generated strings or comparison results for account authentication, password storage, or production testing.

Create PBKDF2-derived demo text that resembles bcrypt formatting. It is not a real bcrypt hash.

Password: [demo value] | Work setting: 12 | Prefix: 2b

Demo output only — not a real bcrypt hash

Check whether pasted text resembles the expected structure; this does not validate a bcrypt digest.

$2b$12$abcdefghijklmnopqrstuuuuuuuuuuuuuuuuuuuuuuuuuuuuu

Looks like the expected text structure; the bcrypt digest is not validated.

Compare a password with this demo's own output only. This cannot verify real bcrypt hashes.

Password: [demo value] | Text: [generated demo output]

Demo-only comparison; not valid for real bcrypt hashes.

Does this tool generate real bcrypt hashes?

No. Generated strings are based on PBKDF2 and only resemble bcrypt-formatted text. They cannot be used with bcrypt libraries or stored as bcrypt hashes.

Can this tool verify a real bcrypt hash?

No. The inspector checks the text's general structure, but does not validate the bcrypt digest. The comparison mode is only for output generated by this demo.

Should I use the generated output for an account or production system?

No. Use a maintained bcrypt implementation in your application for actual password hashing and verification.

What does the cost field do here?

It controls the demo's PBKDF2 work setting, with an upper cap in the implementation. It is not equivalent to bcrypt's cost factor and should not be compared with one.

Are my inputs sent to a server?

The demo processes inputs in your browser. Still, do not enter a current account password on a shared or untrusted device.

More utilities you might find handy.

Generate random strings for application secrets or testing, with selectable formats, prefixes, and bulk export.

Instantly generate CRC32, CRC32C, BZIP2, MPEG-2 and other checksums for text, files, hex or Base64 – 100% client-side.

Compute MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes of files or text entirely in your browser with no upload.