Bcrypt Work Factor & Hash Latency Benchmark Calculator
Calculate key derivation rounds, server hashing latency, and GPU crack resistance (OWASP compliant).
Execution runs 100% locally inside the browser sandbox using HTML5 Canvas, Web Cryptography Subtle API, and Web Workers. No data is ever transmitted across the network.
Zero network latency. Operates completely offline with zero dependencies on third-party backend servers or cloud services.
Built according to official RFC specifications, cryptographic test vectors, and enterprise-grade data transformation standards.
How to Use Bcrypt Work Factor & Hash Latency Benchmark Calculator
Drag the slider between rounds 4 and 20.
Inspect the calculated 2^cost rounds and estimated execution time.
Review the security level and architecture recommendations.
Frequently Asked Questions
What is the OWASP recommended cost factor in 2026?
OWASP recommends a minimum work factor of 12 (or 13-14 for high-security applications), targeting 250ms to 1000ms server calculation time.
Why is Bcrypt resistant to GPUs?
Bcrypt requires 4 KB of memory per thread with continuous blowfish key expansion, which limits GPU parallel throughput compared to raw SHA-256.
Related Security & Network Tools
View all →Split master passwords into M-of-N threshold shares with GF(256) math.
Generate cryptographically secure 12, 18, or 24-word seed phrases.
Calculate network address, broadcast, usable host IP range, and masks.
Derive secure keys with customizable iterations, salts, and SHA hashes.