What input does Bcrypt Hash Checker accept?

Bcrypt Hash Checker accepts a candidate password and a complete bcrypt hash.

Which settings does Bcrypt Hash Checker provide?

Bcrypt Hash Checker provides a Hash field for the complete bcrypt hash.

What does Bcrypt Hash Checker return?

Bcrypt Hash Checker returns a match or no-match result.

Bcrypt Hash Checker | Tool Factory

Tool workspace

Your input stays in this browser.

Needs input

You can run the tool again after any change.

Input

Password

Enter the password to check against the encoded Bcrypt hash. The limit is 72 UTF-8 bytes.

Encoded hash

Your result appears here

Check whether a candidate password matches a complete bcrypt hash in your browser.

This tool runs open-source code from CyberChef by GCHQ (Apache License 2.0). See open-source credits.

Bcrypt Hash Checker uses password-hash comparison for the supplied input. The public tool displays Match or No match without echoing the password. Library exceptions become operation errors.

The public tool displays Match or No match without echoing the password. Library exceptions become operation errors. This result runs in the browser for this catalog category. Processing runs in the browser.

Password-hash comparison checks one candidate; it does not replace authentication policy or secret storage.

Sources: USENIX: A Future-Adaptable Password Scheme; bcrypt.js implementation documentation

Instructions

Provide text or data for this tool.
Create a disposable bcrypt fixture before checking it. This applies to Bcrypt Hash Checker.
Use the parser to inspect cost and salt when a copied hash fails. This applies to Bcrypt Hash Checker.

Example

Input: Use candidate "test" and a complete bcrypt hash generated from that disposable value.

Settings: Bcrypt Hash Checker: Paste the encoded bcrypt value into Encoded hash. Keep its version prefix, cost, salt, and digest intact.

Result: The public tool displays Match or No match without echoing the password. Library exceptions become operation errors.

Limits

Bcrypt Hash Checker: The compatibility layer rejects passwords that exceed bcrypt's 72-byte input limit.
Bcrypt Hash Checker: Malformed input can cause an error rather than a reliable password mismatch result.