Lua Requires Chilkat v9.5.0.65+

BCrypt Verify a Password (Check if Password is Correct)

See more Encryption Examples

A system that uses BCrypt for storing passwords would not store the actual password, but would instead store the bcrypt hash of the password. When a user presents the password, such as for login, call BCryptVerify to verify the password against the stored bcrypt hash. Lua

local chilkat = require("chilkat")

-- This example assumes the Chilkat API to have been previously unlocked.
-- See Global Unlock Sample for sample code.

local crypt = chilkat.Crypt2.new()

local storedHash = "$2a$10$H5kIVktMGzAPKGKNAe9DVu0iwEqfhv/o4MMJ/Dzw/MPy1leOE9NOK"
local password = "mySecretPassword"

local passwordValid = crypt:bcrypt_verify(password, storedHash)
if passwordValid then
    print(password .. " is valid.")
else
    print(password .. " is NOT valid.")
end

password = "notAValidPassword"
passwordValid = crypt:bcrypt_verify(password, storedHash)
if passwordValid then
    print(password .. " is valid.")
else
    print(password .. " is NOT valid.")
end

-- Output should be:

--     mySecretPassword is valid.
--     notAValidPassword is NOT valid.