Java

BCrypt Verify a Password (Check if Password is Correct)

See more Encryption Examples

A system that uses BCrypt for storing passwords would not store the actual password, but would instead store the bcrypt hash of the password. When a user presents the password, such as for login, call BCryptVerify to verify the password against the stored bcrypt hash.

Note: This example requires Chilkat v9.5.0.65 or greater.

Chilkat2 Java

import com.chilkatsoft.chilkat2.ChilkatException;
import com.chilkatsoft.chilkat2.Crypt2;

public class ChilkatExample {

    public static void main(String[] args) {
        // This example assumes the Chilkat API to have been previously unlocked.
        // See Global Unlock Sample for sample code.

        Crypt2 crypt = new Crypt2();

        String storedHash = "$2a$10$H5kIVktMGzAPKGKNAe9DVu0iwEqfhv/o4MMJ/Dzw/MPy1leOE9NOK";
        String password = "mySecretPassword";

        try {
            crypt.bCryptVerify(password, storedHash);
            System.out.println(password + " is valid.");
        } catch (ChilkatException e) {
            System.out.println(password + " is NOT valid.");
        }

        password = "notAValidPassword";
        try {
            crypt.bCryptVerify(password, storedHash);
            System.out.println(password + " is valid.");
        } catch (ChilkatException e) {
            System.out.println(password + " is NOT valid.");
        }

        // Output should be:

        //     mySecretPassword is valid.
        //     notAValidPassword is NOT valid.
    }
}