Bcrypt Verify
Check whether a password matches a bcrypt hash locally in your browser. This tool verifies bcrypt hashes and does not decrypt them. Read more
Check a password against a bcrypt hash
Bcrypt Verify compares a password with an existing bcrypt hash in your browser. A match means the password produces that hash under the embedded cost and salt. Verification does not decrypt bcrypt and cannot recover the original password from the hash alone.
Use this page after generating a hash with the Bcrypt Hash Generator, or when checking hashes created by another compatible bcrypt implementation.
How to verify a bcrypt hash
- Enter the password.
- Paste the full encoded bcrypt hash, normally 60 characters starting with
$2a$,$2b$,$2x$, or$2y$. - Click Verify.
- Read Match or Not match, and inspect the parsed version, cost, and salt when the hash is syntactically valid.
Invalid hashes and password limits
Malformed hashes show a validation error instead of a generic failure. Empty passwords and passwords longer than 72 UTF-8 bytes are rejected before verification runs.
Frequently asked questions
Does a Match result decrypt the password?
No. It only confirms that the candidate password matches the hash.
Why do I see Not match for an invalid hash?
Invalid hash syntax and a wrong password both use the non-match badge. Check the error message area for hash-format problems, and confirm the hash fields are filled only when the hash itself is valid.
Can I verify hashes from other libraries?
Yes, when they use the standard encoded bcrypt format with a supported version prefix and cost.