(AutoIt) BCrypt Verify a Password (Check if Password is Correct)

A system that uses BCrypt for storing passwords would not store the actual password, but would instead store the bcrypt hash of the password. When a user presents the password, such as for login, call BCryptVerify to verify the password against the stored bcrypt hash.

Note: This example requires Chilkat v9.5.0.65 or greater.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

; This example assumes the Chilkat API to have been previously unlocked.
; See Global Unlock Sample for sample code.

$oCrypt = ObjCreate("Chilkat.Crypt2")

Local $storedHash = "$2a$10$H5kIVktMGzAPKGKNAe9DVu0iwEqfhv/o4MMJ/Dzw/MPy1leOE9NOK"
Local $sPassword = "mySecretPassword"

Local $bPasswordValid = $oCrypt.BCryptVerify($sPassword,$storedHash)
If ($bPasswordValid = True) Then
    ConsoleWrite($sPassword & " is valid." & @CRLF)
Else
    ConsoleWrite($sPassword & " is NOT valid." & @CRLF)
EndIf

$sPassword = "notAValidPassword"
$bPasswordValid = $oCrypt.BCryptVerify($sPassword,$storedHash)
If ($bPasswordValid = True) Then
    ConsoleWrite($sPassword & " is valid." & @CRLF)
Else
    ConsoleWrite($sPassword & " is NOT valid." & @CRLF)
EndIf

; Output should be:

; 	mySecretPassword is valid.
; 	notAValidPassword is NOT valid.