(Objective-C) BCrypt Verify a Password (Check if Password is Correct)

A system that uses BCrypt for storing passwords would not store the actual password, but would instead store the bcrypt hash of the password. When a user presents the password, such as for login, call BCryptVerify to verify the password against the stored bcrypt hash.

Note: This example requires Chilkat v9.5.0.65 or greater.

Chilkat Objective-C Library Downloads MAC OS X (Cocoa) Libs iOS Libs

#import <CkoCrypt2.h>
#import <NSString.h>

// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

CkoCrypt2 *crypt = [[CkoCrypt2 alloc] init];

NSString *storedHash = @"$2a$10$H5kIVktMGzAPKGKNAe9DVu0iwEqfhv/o4MMJ/Dzw/MPy1leOE9NOK";
NSString *password = @"mySecretPassword";

BOOL passwordValid = [crypt BCryptVerify: password bcryptHash: storedHash];
if (passwordValid == YES) {
    NSLog(@"%@%@",password,@" is valid.");
}
else {
    NSLog(@"%@%@",password,@" is NOT valid.");
}

password = @"notAValidPassword";
passwordValid = [crypt BCryptVerify: password bcryptHash: storedHash];
if (passwordValid == YES) {
    NSLog(@"%@%@",password,@" is valid.");
}
else {
    NSLog(@"%@%@",password,@" is NOT valid.");
}

// Output should be:

// 	mySecretPassword is valid.
// 	notAValidPassword is NOT valid.