(Tcl) BCrypt Verify a Password (Check if Password is Correct)

A system that uses BCrypt for storing passwords would not store the actual password, but would instead store the bcrypt hash of the password. When a user presents the password, such as for login, call BCryptVerify to verify the password against the stored bcrypt hash.

Note: This example requires Chilkat v9.5.0.65 or greater.

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

# This example assumes the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

set crypt [new_CkCrypt2]

set storedHash "$2a$10$H5kIVktMGzAPKGKNAe9DVu0iwEqfhv/o4MMJ/Dzw/MPy1leOE9NOK"
set password "mySecretPassword"

set passwordValid [CkCrypt2_BCryptVerify $crypt $password $storedHash]
if {$passwordValid == 1} then {
    puts "$password is valid."
} else {
    puts "$password is NOT valid."
}

set password "notAValidPassword"
set passwordValid [CkCrypt2_BCryptVerify $crypt $password $storedHash]
if {$passwordValid == 1} then {
    puts "$password is valid."
} else {
    puts "$password is NOT valid."
}

# Output should be:

# 	mySecretPassword is valid.
# 	notAValidPassword is NOT valid.

delete_CkCrypt2 $crypt