(MFC) BCrypt Verify a Password (Check if Password is Correct)

A system that uses BCrypt for storing passwords would not store the actual password, but would instead store the bcrypt hash of the password. When a user presents the password, such as for login, call BCryptVerify to verify the password against the stored bcrypt hash.

Note: This example requires Chilkat v9.5.0.65 or greater.

Chilkat C/C++ Library Downloads MS Visual C/C++ Libs

See Also: Using MFC CString in Chilkat

#include <CkCrypt2.h>

void ChilkatSample(void)
    {
    CkString strOut;

    // This example assumes the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    CkCrypt2 crypt;

    const char *storedHash = "$2a$10$H5kIVktMGzAPKGKNAe9DVu0iwEqfhv/o4MMJ/Dzw/MPy1leOE9NOK";
    const char *password = "mySecretPassword";

    bool passwordValid = crypt.BCryptVerify(password,storedHash);
    if (passwordValid == true) {
        strOut.append(password);
        strOut.append(" is valid.");
        strOut.append("\r\n");
    }
    else {
        strOut.append(password);
        strOut.append(" is NOT valid.");
        strOut.append("\r\n");
    }

    password = "notAValidPassword";
    passwordValid = crypt.BCryptVerify(password,storedHash);
    if (passwordValid == true) {
        strOut.append(password);
        strOut.append(" is valid.");
        strOut.append("\r\n");
    }
    else {
        strOut.append(password);
        strOut.append(" is NOT valid.");
        strOut.append("\r\n");
    }

    // Output should be:

    // 	mySecretPassword is valid.
    // 	notAValidPassword is NOT valid.


    SetDlgItemText(IDC_EDIT1,strOut.getUnicode());

    }