Hash a password
API · /bcrypt-api
Bcrypt API
Hash and verify passwords with bcrypt, server-side. Generate a salted bcrypt hash at a cost factor you choose (4–14), check a plaintext password against an existing hash, or inspect a hash to read its bcrypt version, cost factor and salt. Fully compatible with bcrypt hashes from PHP ($2y$), Node, Python and others, so you can verify and migrate existing credentials. Pure server-side computation with no third-party upstream, so it is always available — and it offloads the deliberately CPU-intensive hashing work from your own servers. Ideal for adding password authentication, credential migration, auth tooling, testing and no-code backends.
API health
healthy- Uptime
- 100.00%
- Server probes · 24h
- Avg latency
- 114 ms
- Server probes · 24h
- Subscribers
- 4,308
- active
- Total calls
- 12
- last 7 days
Pricing
Pick a tier — billed monthly, cancel anytime.
Free
Free
- 600 calls / month
- 2 requests / second
- Hard cap (429 above quota, no overage)
- 600 requests/month, 2 req/s
- Hash, verify & inspect
- Cost factor 4-14
- No credit card
Basic
€5.00 /month
- 25,000 calls / month
- 5 requests / second
- Hard cap (429 above quota, no overage)
- 25,000 requests/month, 5 req/s
- PHP $2y$ / Node / Python compatible
- Adjustable cost factor
- Commercial use, email support
Pro
€16.00 /month
- 150,000 calls / month
- 12 requests / second
- Hard cap (429 above quota, no overage)
- 150,000 requests/month, 12 req/s
- High-volume auth workloads
- Offload CPU-heavy hashing
- Priority email support
Mega
€41.00 /month
- 1,000,000 calls / month
- 30 requests / second
- Hard cap (429 above quota, no overage)
- 1,000,000 requests/month, 30 req/s
- Auth-platform & migration scale
- Maximum concurrency
- Priority support
Built by
Related APIs
Other APIs with overlapping tags.
Password API
A fast, fully-local password toolkit: generate cryptographically-secure random passwords (configurable length, character classes and exclude-similar), estimate password strength (entropy bits, a 0-4 score, character-class breakdown, common-password detection, an offline crack-time estimate and actionable feedback), and create memorable diceware-style passphrases. Built on Node crypto, no third-party upstream, and inputs are never logged — so responses are instant, private and always available. Ideal for signup and account flows, admin tools, password managers and security features.
api.oanor.com/password-api
Hash API
Compute cryptographic hashes (MD5, SHA-1, SHA-256/384/512, SHA-3, RIPEMD-160) in hex or base64, generate HMAC signatures for webhook and message authentication, and mint v4 UUIDs. All server-side and deterministic. Handy for integrity checks, signing, cache keys, deduplication and id generation.
api.oanor.com/hash-api
CVE Vulnerability API
Look up software vulnerabilities by their CVE identifier and get clean, structured details — title, description, CVSS score, severity and vector, CWE weakness types, affected vendors and products with version ranges, and reference links — plus search every CVE that affects a given vendor or product, and stream the most recently published CVEs. Sourced from the CIRCL CVE Search service over the official CVE Record 5.1 data and returned as tidy JSON through a fast, reliable API. Ideal for vulnerability management and SOC tooling, DevSecOps and SCA pipelines, security dashboards, compliance and asset-risk monitoring.
api.oanor.com/cve-api
TOTP / 2FA API
Add and test two-factor authentication without wrangling a crypto library. Generate a fresh base32 secret with a ready-to-scan otpauth URI, compute the current time-based one-time code (RFC 6238), verify a code submitted by a user with an adjustable drift window, or build an otpauth:// URI for any secret. Supports SHA-1, SHA-256 and SHA-512, 6 to 8 digits and a custom period, and is fully compatible with Google Authenticator, Authy, 1Password and other authenticator apps. Pure server-side computation with no third-party upstream, so responses are instant and the service is always available. Ideal for adding 2FA to apps, authentication tooling, QA and testing, and no-code automation.
api.oanor.com/totp-api
Frequently asked questions
Quick answers about pricing, quotas, and integration.
How do I get an API key for Bcrypt API?
What's the rate limit for Bcrypt API?
How much does Bcrypt API cost?
Can I cancel my subscription anytime?
Is Bcrypt API GDPR-compliant?
Pick an endpoint from the list on the left to see its details and try it.
Code snippets
Sign up to get an API key, then call any path under your slug.
curl https://api.oanor.com/bcrypt-api/SOME_PATH \
-H "x-oanor-key: oanor_test_..."
const res = await fetch("https://api.oanor.com/bcrypt-api/SOME_PATH", {
headers: { "x-oanor-key": "oanor_test_..." }
});
const data = await res.json();
$ch = curl_init("https://api.oanor.com/bcrypt-api/SOME_PATH");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, ["x-oanor-key: oanor_test_..."]);
$response = curl_exec($ch);
import requests
r = requests.get(
"https://api.oanor.com/bcrypt-api/SOME_PATH",
headers={"x-oanor-key": "oanor_test_..."},
)
print(r.json())
Ratings
Sign in to rate.
No reviews yet.
Discussion
Ask questions, share usage tips, get answers from the provider and other developers. Public — anyone can read.
Sign in to start a thread or reply.
Sign inNew thread
·
-
Provider answer
🔒 This thread is locked — no new replies.
-
·
- No threads yet — start the discussion.
Support
Private 1:1 support with the provider — billing questions, integration issues, account problems. Only you and the provider team can see these threads.
Sign in to open a support ticket.
Sign inOpen new ticket
Describe what you need help with. The provider team gets an email and replies on the ticket page.
-
·
Urgent - No tickets yet for this API.