DataFlex

BCrypt Verify a Password (Check if Password is Correct)

See more Encryption Examples

A system that uses BCrypt for storing passwords would not store the actual password, but would instead store the bcrypt hash of the password. When a user presents the password, such as for login, call BCryptVerify to verify the password against the stored bcrypt hash.

Note: This example requires Chilkat v9.5.0.65 or greater.

DataFlex

Use ChilkatAx-win32.pkg

Procedure Test
    Handle hoCrypt
    String sStoredHash
    String sPassword
    Boolean iPasswordValid

    // This example assumes the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    Get Create (RefClass(cComChilkatCrypt2)) To hoCrypt
    If (Not(IsComObjectCreated(hoCrypt))) Begin
        Send CreateComObject of hoCrypt
    End

    Move "$2a$10$H5kIVktMGzAPKGKNAe9DVu0iwEqfhv/o4MMJ/Dzw/MPy1leOE9NOK" To sStoredHash
    Move "mySecretPassword" To sPassword

    Get ComBCryptVerify Of hoCrypt sPassword sStoredHash To iPasswordValid
    If (iPasswordValid = True) Begin
        Showln sPassword " is valid."
    End
    Else Begin
        Showln sPassword " is NOT valid."
    End

    Move "notAValidPassword" To sPassword
    Get ComBCryptVerify Of hoCrypt sPassword sStoredHash To iPasswordValid
    If (iPasswordValid = True) Begin
        Showln sPassword " is valid."
    End
    Else Begin
        Showln sPassword " is NOT valid."
    End

    // Output should be:

    // 	mySecretPassword is valid.
    // 	notAValidPassword is NOT valid.


End_Procedure