Hash or check a password

Produce a bcrypt hash to store, or check a candidate password against one you already have.

Options

Cost factor, 4 to 15. Twelve is the usual production figure.

1 credit

Needs Password.

What it does

Also called: hash a password with bcrypt · check a password against a bcrypt hash · generate a bcrypt hash online.

Use it from your own code

The same endpoint this page calls — no daily cap, 1 credit a call either way.

POST /v1/crypto/bcrypt-hash

curl -X POST "$DOATHING_API/v1/crypto/bcrypt-hash" \
  -H "x-api-key: $DOATHING_KEY" \
  -H "content-type: application/json" \
  -d '{"password": "correct horse battery staple"}'

Produce a bcrypt hash to store, or check a candidate password against one you already have.

Generate a bcrypt hash at a chosen cost factor, or verify a candidate against an existing hash.

Response

The result carries your remaining balance alongside it, so you can track spend without a second call.

{
  "hash": "$2b$12$Xq…",
  "rounds": 12,
  "request_id": "37f01edb-0163-42a1-ac51-0acaef979800",
  "credits_remaining": 96
}

Cost

1 credit per call, whether it is run from the site or from the API — the credential differs, the price does not. A new account starts with 20 credits.

A rejected request still costs a credit: the authorizer decrements before the tool validates. A call rejected for a missing or invalid key is free.

Parameters

Generated from the endpoint’s own validation, so this is exactly what it accepts. A body field goes at the top level; an option goes inside options.

NameInTypeDefaultNotes
password *bodystring—
hashbodystring—
roundsoptionsinteger12Cost factor, 4 to 15. Twelve is the usual production figure.