Password hash & verify (bcrypt/scrypt) API

Hash a password with bcrypt or scrypt, or verify a password against a stored hash (auto-detects the algorithm). These KDFs are deliberately slow and an LLM cannot compute them — the real primitive for signup/auth. The password is never logged. Answers 'hash this password', 'verify this password against this bcrypt hash', 'is this the right password'.

Price$0.01per request

MethodPOST

Route/v1/util/password-hash

StatusLive

MIME typeapplication/json

Rate limit60/minute

CacheNo cache

utilpasswordbcryptscrypthashauthkdfsecurity

API URLhttps://x402.hexl.dev/v1/util/password-hash

Integration docs

Example request

{
  "op": "hash",
  "password": "hunter2",
  "algorithm": "bcrypt",
  "rounds": 10
}

Example response

{
  "op": "hash",
  "algorithm": "bcrypt",
  "rounds": 10,
  "hash": "$2b$10$N9qo8uLOickgx2ZMRZoMyeIjZAgcfl7p92ldGxad68LJZdL17lhWy"
}

Input schema

{
  "type": "object",
  "required": [
    "op",
    "password"
  ],
  "properties": {
    "op": {
      "type": "string",
      "enum": [
        "hash",
        "verify"
      ]
    },
    "password": {
      "type": "string"
    },
    "algorithm": {
      "type": "string",
      "enum": [
        "bcrypt",
        "scrypt"
      ],
      "default": "bcrypt"
    },
    "rounds": {
      "type": "number",
      "default": 10
    },
    "hash": {
      "type": "string"
    }
  }
}

Output schema

{
  "type": "object",
  "additionalProperties": true
}