dcodeIO/bcrypt.js
Bcrypt.js
bcrypt.js is a portable JavaScript implementation of the bcrypt algorithm used for securely hashing and verifying user passwords. It functions as a credential security utility that protects stored passwords against brute-force attacks through the use of salts and configurable work factors.
The library is designed as a pure JavaScript cryptographic module, allowing it to run in any JavaScript environment, including both server-side Node.js and client-side web browsers, without requiring native system binaries or C++ bindings. It is a zero-dependency standalone module to minimize security risks and installation overhead.
Its core capabilities cover the transformation of plain-text passwords into secure hashes and the verification of those hashes during authentication workflows. The project includes tools for salt generation, password truncation detection, and the extraction of salt strings and iteration counts from encrypted hashes.
Features
- Bcrypt Implementations - Provides a pure JavaScript implementation of the bcrypt algorithm for secure password hashing and verification.
- Pure JavaScript Implementations - Implements the bcrypt algorithm entirely in JavaScript for seamless portability across Node.js and browser environments.
- Password Hashing Utilities - Transforms plain-text passwords into secure hashes using configurable salt rounds and work factors.
- Cryptographic Salt Generation - Generates high-entropy unique salts for each password to protect against rainbow table attacks.
- Password Verification - Compares plain-text passwords against stored bcrypt hashes to verify user identity.
- Password Hashing Utilities - Transforms plain-text passwords into secure, irreversible hashes to protect user credentials in storage.
- Work Factor Iteration Controls - Allows configuring the number of hashing rounds to adjust computational cost and increase resistance to brute-force attacks.
- Cross-Runtime Cryptography - Ensures identical password hashing and verification behavior across both server-side Node.js and client-side browser environments.
- Credential Security and Utilities - Offers utilities for secure credential protection using salts and configurable work factors.
- User Authentication Workflows - Provides the core primitives for verifying plain-text passwords against stored hashes within authentication workflows.
- Non-Blocking Execution - Provides asynchronous API paths to perform computationally expensive password hashing without blocking the JavaScript event loop.
- Zero-Dependency Libraries - Functions as a standalone module with no external dependencies to reduce security overhead and installation complexity.
- Cryptography and Security - Optimized, zero-dependency bcrypt implementation.
