(PowerShell) BCrypt Verify a Password (Check if Password is Correct)

A system that uses BCrypt for storing passwords would not store the actual password, but would instead store the bcrypt hash of the password. When a user presents the password, such as for login, call BCryptVerify to verify the password against the stored bcrypt hash.

Note: This example requires Chilkat v9.5.0.65 or greater.

Chilkat .NET Downloads Chilkat .NET Assemblies

Add-Type -Path "C:\chilkat\ChilkatDotNet47-9.5.0-x64\ChilkatDotNet47.dll"

# This example assumes the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

$crypt = New-Object Chilkat.Crypt2

$storedHash = "$2a$10$H5kIVktMGzAPKGKNAe9DVu0iwEqfhv/o4MMJ/Dzw/MPy1leOE9NOK"
$password = "mySecretPassword"

$passwordValid = $crypt.BCryptVerify($password,$storedHash)
if ($passwordValid -eq $true) {
    $($password + " is valid.")
}
else {
    $($password + " is NOT valid.")
}

$password = "notAValidPassword"
$passwordValid = $crypt.BCryptVerify($password,$storedHash)
if ($passwordValid -eq $true) {
    $($password + " is valid.")
}
else {
    $($password + " is NOT valid.")
}

# Output should be:

# 	mySecretPassword is valid.
# 	notAValidPassword is NOT valid.