What input does Bcrypt Hash Parser accept?

Bcrypt Hash Parser accepts a complete bcrypt hash as text.

Does Bcrypt Hash Parser need extra settings?

Bcrypt Hash Parser does not need extra settings.

What does Bcrypt Hash Parser return?

Bcrypt Hash Parser returns the bcrypt version, cost, salt, digest, and complete input string.

Bcrypt Hash Parser | Tool Factory

Tool workspace

Your input stays in this browser.

Needs input

You can run the tool again after any change.

Input

Your result appears here

Parse a complete bcrypt hash into its version, cost, salt, and digest fields.

This tool runs open-source code from CyberChef by GCHQ (Apache License 2.0). See open-source credits.

Bcrypt Hash Parser uses bcrypt parsing for the supplied input. The operation reports bcrypt rounds, salt, password hash, and the complete input string. The output reports structure or candidate information, not a recovered secret.

The operation reports bcrypt rounds, salt, password hash, and the complete input string. The output reports structure or candidate information, not a recovered secret. This result runs in the browser for this catalog category. Processing runs in the browser.

Parsing describes a bcrypt string; it does not authenticate a user or recover a password.

Sources: USENIX: A Future-Adaptable Password Scheme; bcrypt.js implementation documentation

Instructions

Provide text or data for this tool.
Use a public fixture hash only. This applies to Bcrypt Hash Parser.
Check that the version and cost fields parse successfully. This applies to Bcrypt Hash Parser.
Keep the parsed salt and digest as metadata, not as a replacement secret. This applies to Bcrypt Hash Parser.

Example

Input: A public bcrypt string such as "$2b$10$N9qo8uLOickgx2ZMRZoMyeIjZAgcfl7p92ldGxad68LJZdL17lhWy". Algorithm operation: Bcrypt Hash Parser.

Settings: Bcrypt Hash Parser: Paste a complete bcrypt encoded string. Keep the version, cost, salt, and digest fields intact. Use text input and text output.

Result: The operation reports bcrypt rounds, salt, password hash, and the complete input string. The output reports structure or candidate information, not a recovered secret.

Limits

Bcrypt Hash Parser: Parsing does not validate the original password.
Bcrypt Hash Parser: The salt is not secret and does not identify the password owner.
Bcrypt Hash Parser: Do not expose production password hashes in logs or public pages.