Can bcrypt recover the original password?

No. Bcrypt verifies a candidate password against a stored hash; it does not provide a decryption operation.

Bcrypt Hash Generator | Tool Factory

Tool workspace

Your input stays in this browser.

Needs input

You can run the tool again after any change.

Password

Bcrypt accepts at most 72 UTF-8 bytes. Use it for legacy compatibility. Use Argon2id for new password storage.

Options

Rounds

Your result appears here

Create a salted bcrypt password hash with cost 10 to 31. Get a 60-character $2b$ hash, generated in your browser.

This tool runs open-source code from CyberChef by GCHQ (Apache License 2.0). See open-source credits.

Rounds controls bcrypt’s cost exponent. Increasing it by one doubles the key-setup work.

The hash contains its version, cost, salt, and password hash. Copy the complete string for verification.

Create a hash for a seed user or test fixture in a development database.

Sources: USENIX 1999: A Future-Adaptable Password Scheme; bcrypt.js implementation documentation; OWASP Password Storage Cheat Sheet

Set the bcrypt cost

Enter a test password.
Set Rounds, then wait for the result.
Use Bcrypt Hash Checker to compare the password with the saved hash.

Salt, verification, and password length

Browser timings do not predict server timings.
UTF-8 byte length can exceed character count; the tool rejects overlong passwords.
Check that the receiving library accepts the $2b$ version.

Hash a sample password

Input: correct horse battery staple

Settings: Rounds 10

Result: A 60-character hash that starts with $2b$10$, then 22 salt characters and 31 hash characters. A new salt makes the text different on every run.

A fresh random salt changes each result. Use password verification instead of comparing hash strings.