Verify passwords against bcrypt hashes

Check a password candidate against an encoded bcrypt hash.

freeworks offlinenothing uploaded
ToolBcrypt Verifier
Input
Output
—
Put this on your own site

The frame below runs the same code as this page, in the reader's own browser. Nothing is sent to us, and nothing is sent to you.

Pick a dark background and the text and panels follow it, so the frame stays readable on a dark page.

Preview

How it works

The encoded bcrypt string supplies the version, cost, salt, and checksum; the candidate password is processed with those parameters and compared to the stored checksum. Verification tests one candidate and does not reveal the original password.

  • Self-contained salt and cost fields let a verifier reproduce the stored result.

Worked example

Verify Password
Check if a password matches a bcrypt hash
Input
											Input: MyPassword123
Hash: $2b$10$N9qo8uLOickgx2ZMRZoMyeIjZAgcfl7p92ldGxad68LJZdL17lhWy
Output
												NO MATCH: Password does not match the bcrypt hash

When to use this

Login checks, account migrations, and known-vector tests verify bcrypt strings.

Edge cases

  • A malformed cost field must not be silently interpreted as a default.
  • Changing the salt makes the correct password produce a different string.
  • A successful comparison does not prove the account identity outside the verifier.

References