Penjana dan penyemak bcrypt
Buat atau semak hash bcrypt
Berjalan dalam pelayar anda · Tiada muat naik
Alat ini dan arahan di halaman ini dalam bahasa Inggeris buat masa ini. Ia berfungsi dengan cara yang sama: semuanya berjalan dalam pelayar anda.
Each step up doubles the time. 10 to 12 is usual for websites today.
Pelayar anda terlalu lama untuk menjalankan alat ini. Sila kemas kininya, atau gunakan versi semasa Chrome, Edge, Firefox atau Safari.
- Tiada apa-apa meninggalkan peranti anda
- Tiada had saiz daripada pelayan
- Tiada pendaftaran, tiada tera air
- Percuma
How to use the bcrypt generator
- Choose to make a hash or to check one.
- Type the password, and the hash when checking.
- Copy the hash, or read whether they match.
Good to know
- Hashes start with $2b$, the current version. Hashes starting with $2a$ and $2y$ (PHP) can be checked too.
- The cost is the number of rounds as a power of 2: each step up doubles the time it takes to make and to check a hash, for you and for an attacker. 10 to 12 is usual for websites.
- Each hash gets a new random salt, so the same password gives a different hash every time. All of them check correctly.
- bcrypt uses only the first 72 bytes of a password; the page warns when a password is longer.
Your passwords stay on your device
Hashing and checking run in your browser with bcrypt.js. Nothing you type is sent anywhere.
Soalan lazim
Can a bcrypt hash be turned back into the password?
No. bcrypt is one-way: the only way to find the password is to try candidates, which the cost makes slow on purpose. That is why you can check a guess here but not "decrypt" a hash.
Is my password sent anywhere?
No. The hash is made in your browser, and this site's security policy blocks the page from sending anything.