# Bcrypt-Style Hash Demo (Not Bcrypt)

URL: https://phishdestroy.io/developer-tools/bcrypt-hash-generator
Category: General dev
Where it runs: Runs locally (nothing you enter is uploaded)

A demonstration that imitates the look of a bcrypt hash using a random salt and a single SHA-256 digest. It is not real bcrypt, and bcrypt libraries cannot check its output.

## Example input

Demo password

```
correct horse battery staple
```

A string that starts with $2b10 followed by 53 characters of encoded salt and digest; it changes on every run because the salt is random.

## FAQ

### Is this real bcrypt?

No. It puts a random 16-byte salt in front of the password, hashes that once with SHA-256 and prints the first 53 Base64 characters of salt and digest after $2b and the rounds number. Real bcrypt runs the Eksblowfish key setup 2^cost times; here the rounds setting does not change the computation.

### Can it verify a bcrypt hash?

No. Verify mode rejects the strings that Hash mode produces as an invalid format, and it cannot check hashes made by real bcrypt libraries. To create or check real bcrypt hashes, use a maintained library such as bcrypt for Node.js or Python, or htpasswd -B.

### Is my password sent anywhere?

No. Everything runs in your browser with the Web Crypto API and nothing is uploaded. Even so, do not type a password you actually use.

## Related tools

- [Text Hash Generator](https://phishdestroy.io/developer-tools/hash-generator)
- [HMAC Generator](https://phishdestroy.io/developer-tools/hmac-generator)
- [Password Generator](https://phishdestroy.io/developer-tools/password-generator)
- [Pwned Password Check](https://phishdestroy.io/developer-tools/pwned-password-check)

All tools: https://phishdestroy.io/developer-tools