Bcrypt Hash Verifier

How Bcrypt Verification Works

Because Bcrypt uses random salts, hashing the same password twice yields different hash strings. To verify a password, you cannot simply hash the input and compare it to the stored hash.

Instead, the Bcrypt verification function extracts the salt rounds and salt sequence directly from the stored hash string. It then hashes the incoming plaintext password using those exact parameters to check for a match.

Step-by-Step Guide: How to Use this Tool

1. Enter the raw plaintext password in the password input field.
2. Paste the stored Bcrypt hash (e.g. starting with $2a$, $2b$, or $2y$) into the hash input field.
3. Click Verify Credentials.
4. The tool will check the match and display the result.

Understanding the Bcrypt Hash Structure

A standard Bcrypt hash follows a structured format:

• $ split markers.
• Identifier tag (e.g., 2a indicates the algorithm version).
• Cost factor (e.g., 10 represents the salt rounds).
• Salt and hash bytes.