(PHP Extension) BCrypt Verify a Password (Check if Password is Correct)

A system that uses BCrypt for storing passwords would not store the actual password, but would instead store the bcrypt hash of the password. When a user presents the password, such as for login, call BCryptVerify to verify the password against the stored bcrypt hash.

Note: This example requires Chilkat v9.5.0.65 or greater.

Chilkat PHP Downloads PHP Extension for Windows, Linux, MacOS, Alpine Linux, Solaris

<?php

// The version number (9_5_0) should match version of the Chilkat extension used, omitting the micro-version number.
// For example, if using Chilkat v9.5.0.48, then include as shown here:
include("chilkat_9_5_0.php");

// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

$crypt = new CkCrypt2();

$storedHash = '$2a$10$H5kIVktMGzAPKGKNAe9DVu0iwEqfhv/o4MMJ/Dzw/MPy1leOE9NOK';
$password = 'mySecretPassword';

$passwordValid = $crypt->BCryptVerify($password,$storedHash);
if ($passwordValid == true) {
    print $password . ' is valid.' . "\n";
}
else {
    print $password . ' is NOT valid.' . "\n";
}

$password = 'notAValidPassword';
$passwordValid = $crypt->BCryptVerify($password,$storedHash);
if ($passwordValid == true) {
    print $password . ' is valid.' . "\n";
}
else {
    print $password . ' is NOT valid.' . "\n";
}

// Output should be:

// 	mySecretPassword is valid.
// 	notAValidPassword is NOT valid.

?>