Hash passwords securely using HMAC-SHA256 followed by bcrypt. Provides deterministic hashing with adaptive key stretching.
Supported Tools:
Generate and verify bcrypt(HMAC-SHA256($pass)) hashes instantly with this free browser-based tool. Works across all major browsers and operating systems - ideal for developers, system administrators, and security researchers.
Bcrypt(HMAC-SHA256) is a two-step hashing method where a password is first hashed using HMAC-SHA256 with a fixed internal key, and then the result is hashed using bcrypt. This approach provides deterministic hashing while leveraging bcrypt's adaptive key stretching for security. It is useful for systems that require HMAC-SHA256 → bcrypt hashing for legacy compatibility or deterministic outputs.
Input:
keydecryptor
Output:
$2b$10$U7eOe1FPqsTftcap8bRrfOCAcukiKJsPVbR2sRNnrF8BhRLeqBIf2
Is this bcrypt(HMAC-SHA256) generator free?
Yes. This tool runs entirely in your browser with no installation or server required.
Why combine HMAC-SHA256 and bcrypt?
The password is first processed using HMAC-SHA256 with an internal constant key for deterministic output, then hashed with bcrypt to apply adaptive key stretching for security.
Can I use this to verify a hash?
Yes. Paste a hash and its original password into the verifier to instantly check if they match.
Which bcrypt formats are supported?
This tool supports standard bcrypt formats including $2a$, $2b$, and $2y$.
Do I need to provide a key for HMAC?
No. The tool uses a fixed internal key to generate deterministic HMAC-SHA256 outputs. Users do not need to provide a key.