Hashing passwords with Python and Bcrypt

[@joe7992]

Thanks, I use these sort of things all the time in my python homework to surprise my teacher and I think this is awesome.

[@tpbarratt]

I've just come across this video and found it very clear and useful. Now subscribed and looking forward to learning more about Python. Thanks Julian!

[@juliannash3590]

Awesome! Welcome on board!

[@lydiayoussef8162]

Thank you very much for this video, I have been struggling for 2 hours now, I wish I had watched this video earlier!

[@maxyulu]

Great tutorial! Thank you. Also just subscribed and hopefully you gonna make more tutorials.

[@franzbiberkopf9179]

Thank you very much for this. But how would you hide the password in the source code of your web-page? Would it be enough to create a dummy page with the password and to import the hashed password in the main code of the application?

[@jayaramkulkarni4989]

Thanks, was facing that problem discussed in video at 5:30. It was really helpful.

[@lostfrequentie_7476]

with like a Tkinter Entry its input = Entry1.get() cryp = bytes(input, encoding="utf-8") result = bcrypt.hashpw(cryp, bcrypt.gensalt()) print(result)

[@simrakausar6271]

I get error "invalid salt" in checkpw. I m writing a code for password authentication using socket programming in python.

[@joegodindata]

is there any way you could drop a tutorial similar to this that would include peppering

[@GigelBosket]

Nice one!

[@Parzalai]

Damn bro you explained this so well I'm gonna hash everything now

[@keytetra5093]

where did Julian go?

[@jdchannelviewer]

If I have access to the hash file, why don't I just replace it with Hashes that I know??? Then access the system with my own set of passwords populating it...

[@michellemassaad1013]

What app where you typing on before python ???

[@jsceo]

if hashing is irreversible how checkpw checks if our password matches hash? don't get it

[@NotKewl]

The password typed in by the user is hashed, this is compared to the stored hash.

[@jsceo]

​@@NotKewl but it is hashed with random salt, so how later can be it compared?

[@karolmarkiewicz6526]

i dont get it as well, randomly spotted your comment while was watching yt and looking for an answer

[@djadamkent]

It won’t work unless the salt is the same, otherwise you just end up with a completely different hash each time that can’t be compared. Usually the salt would be generated once and stored as an environment variable on the server.

[@jsceo]

@@djadamkent but it actually works

[@MatteoMenozzi]

i must crypt some fields in db with python can i use the method who yyou show in this video ?

[@miguecastillo]

Can anybody tell me, what do you save on the database?, the varible "hashed" that he creates on the video?

[@ffuyu]

Yes

[@logy6580]

Hey i have a question

[@0xsuperman]

I get what this python tutorial and the lines of this script, thanks. But I am confused how this can be implemented in a production environment. Let's say I have an API key. I will use this to obtain a hashed API key and save it somewhere. In run time, do I ask user to enter the original string of the API key, and then I will hash this user-input API key, and then compare the newly hashed API key vs. the stored hashed API key? If so, how can I be sure when I use `bcrypt.hashpw()` on the newly entered API key, the resulting hashed string will be the same as the stored one? Can/should I save the `hashed = bcrypt.hashpw(password, bcrypt.gensalt())` inside the project directory, so when I hash the new API key, it should result the same hashed string?

[@anujlahoty8022]

Awesome tutorial!

[@finessegod2645]

great content bro keep it up, ill be subscribing

[@rryann088]

THANK YOU VERY MUCH! Helped a lot ! Thanks again !! :)

[@biohazard7785]

How would i pass in a user input as the password? I keep getting the "TypeError: can only concatenate str (not "bytes") to str" error. Would it have to be something like username = input("username: ") Or would something need to go before it?

[@noestu]

import bcrypt password = input("password: ") hashed = bcrypt.hashpw(password.encode('utf-8'), bcrypt.gensalt()) print(hashed)

[@EnglishRain]

Fantastic explanation thanks a lot!

[@khushbukumari7753]

How decode this hash password ??

[@srajith4499]

hey how to do that if password was taken from input ??

[@adamhughes5527]

password = input().encode("utf-8")

[@annietabuanaba8458]

thanks for the tutorial...

[@juliannash3590]

You're welcome! Glad you enjoyed it

[@gandalfgrey91]

I do not like the idea of having to grab the password from the database in order to run a check

[@NunoLima10]

Great video

[@daedricpedgey9667]

Shame that you stopped uploading tbh😢

[@juliannash3590]

Got some new videos coming next week!

[@adamhughes5527]

Cheers dude!

[@RyanBess]

Salting ensures that no 2 same passwords are the same hash.

[@DerexArchives]

ty

[@raghavnegi713]

Thanks a thousand!!!!!!!!!

[@mortezamashary187]

How we can hash the user input password???