(Xojo Plugin) BCrypt Verify a Password (Check if Password is Correct)

A system that uses BCrypt for storing passwords would not store the actual password, but would instead store the bcrypt hash of the password. When a user presents the password, such as for login, call BCryptVerify to verify the password against the stored bcrypt hash.

Note: This example requires Chilkat v9.5.0.65 or greater.

Chilkat Xojo Plugin Download Xojo Plugin for Windows, Linux, Mac OS X, and ARM, ARM64

// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

Dim crypt As New Chilkat.Crypt2

Dim storedHash As String
storedHash = "$2a$10$H5kIVktMGzAPKGKNAe9DVu0iwEqfhv/o4MMJ/Dzw/MPy1leOE9NOK"
Dim password As String
password = "mySecretPassword"

Dim passwordValid As Boolean
passwordValid = crypt.BCryptVerify(password,storedHash)
If (passwordValid = True) Then
    System.DebugLog(password + " is valid.")
Else
    System.DebugLog(password + " is NOT valid.")
End If

password = "notAValidPassword"
passwordValid = crypt.BCryptVerify(password,storedHash)
If (passwordValid = True) Then
    System.DebugLog(password + " is valid.")
Else
    System.DebugLog(password + " is NOT valid.")
End If

// Output should be:

// 	mySecretPassword is valid.
// 	notAValidPassword is NOT valid.