Hashing passwords with Python and Bcrypt

Enjoying this type of content? Head over to my website at pythonise.com for full length text based tutorials, courses and guides.
Want to help me make even better content? You can by supporting me on Patreon! / juliannash

[@joe7992]

Thanks, I use these sort of things all the time in my python homework to surprise my teacher and I think this is awesome.

[@tpbarratt]

I've just come across this video and found it very clear and useful. Now subscribed and looking forward to learning more about Python. Thanks Julian!

[@juliannash3590]

Awesome! Welcome on board!

[@maxyulu]

Great tutorial! Thank you. Also just subscribed and hopefully you gonna make more tutorials.

[@lydiayoussef8162]

Thank you very much for this video, I have been struggling for 2 hours now, I wish I had watched this video earlier!

[@franzbiberkopf9179]

Thank you very much for this. But how would you hide the password in the source code of your web-page? Would it be enough to create a dummy page with the password and to import the hashed password in the main code of the application?

[@anujlahoty8022]

Awesome tutorial!

[@jayaramkulkarni4989]

Thanks, was facing that problem discussed in video at 5:30. It was really helpful.

[@lostfrequentie_7476]

with like a Tkinter Entry its
input = Entry1.get()
cryp = bytes(input, encoding="utf-8")
result = bcrypt.hashpw(cryp, bcrypt.gensalt())
print(result)

[@raiyan22]

THANK YOU VERY MUCH! Helped a lot ! Thanks again !! :)

[@finessegod2645]

great content bro keep it up, ill be subscribing

[@EnglishRain]

Fantastic explanation thanks a lot!

[@adamhughes5527]

Cheers dude!

[@simrakausar6271]

I get error "invalid salt" in checkpw. I m writing a code for password authentication using socket programming in python.

[@Parzalai]

Damn bro you explained this so well I'm gonna hash everything now

[@data9051]

is there any way you could drop a tutorial similar to this that would include peppering

[@NunoLima10]

Great video

[@MatteoMenozzi]

i must crypt some fields in db with python can i use the method who yyou show in this video ?

[@annietabuanaba8458]

thanks for the tutorial...

[@juliannash3590]

You're welcome! Glad you enjoyed it

[@raghavnegi713]

Thanks a thousand!!!!!!!!!

[@mortezamashary187]

How we can hash the user input password???

[@0xsuperman]

I get what this python tutorial and the lines of this script, thanks. But I am confused how this can be implemented in a production environment. Let's say I have an API key. I will use this to obtain a hashed API key and save it somewhere. In run time, do I ask user to enter the original string of the API key, and then I will hash this user-input API key, and then compare the newly hashed API key vs. the stored hashed API key? If so, how can I be sure when I use `bcrypt.hashpw()` on the newly entered API key, the resulting hashed string will be the same as the stored one? Can/should I save the `hashed = bcrypt.hashpw(password, bcrypt.gensalt())` inside the project directory, so when I hash the new API key, it should result the same hashed string?

[@jdchannelviewer]

If I have access to the hash file, why don't I just replace it with Hashes that I know??? Then access the system with my own set of passwords populating it...

[@michellemassaad1013]

What app where you typing on before python ???

[@biohazard7785]

How would i pass in a user input as the password? I keep getting the "TypeError: can only concatenate str (not "bytes") to str" error. Would it have to be something like
username = input("username: ")
Or would something need to go before it?

[@noestu]

import bcrypt
password = input("password: ")
hashed = bcrypt.hashpw(password.encode('utf-8'), bcrypt.gensalt())
print(hashed)

[@miguecastillo]

Can anybody tell me, what do you save on the database?, the varible "hashed" that he creates on the video?

[@ffuyu]

Yes

[@khushbukumari7753]

How decode this hash password ??

[@srajith4499]

hey how to do that if password was taken from input ??

[@adamhughes5527]

password = input().encode("utf-8")

[@jsceo]

if hashing is irreversible how checkpw checks if our password matches hash? don't get it

[@NotKewl]

The password typed in by the user is hashed, this is compared to the stored hash.

[@jsceo]

​@@NotKewl but it is hashed with random salt, so how later can be it compared?

[@karolmarkiewicz6526]

i dont get it as well, randomly spotted your comment while was watching yt and looking for an answer

[@djadamkent]

It won’t work unless the salt is the same, otherwise you just end up with a completely different hash each time that can’t be compared. Usually the salt would be generated once and stored as an environment variable on the server.

[@jsceo]

@@djadamkent but it actually works

[@keytetra5093]

where did Julian go?

[@gandalfgrey91]

I do not like the idea of having to grab the password from the database in order to run a check

[@logy6580]

Hey i have a question

[@daedricpedgey9667]

Shame that you stopped uploading tbh😢

[@juliannash3590]

Got some new videos coming next week!

[@RyanBess]

Salting ensures that no 2 same passwords are the same hash.