Hashing passwords with Python and Bcrypt

[joe]

Thanks, I use these sort of things all the time in my python homework to surprise my teacher and I think this is awesome.

[tpbarratt]

I've just come across this video and found it very clear and useful. Now subscribed and looking forward to learning more about Python. Thanks Julian!

[lydiayoussef]

Thank you very much for this video, I have been struggling for 2 hours now, I wish I had watched this video earlier!

[jayaramkulkarni]

Thanks, was facing that problem discussed in video at 5:30. It was really helpful.

[maxyulu]

Great tutorial! Thank you. Also just subscribed and hopefully you gonna make more tutorials.

[franzbiberkopf]

Thank you very much for this. But how would you hide the password in the source code of your web-page? Would it be enough to create a dummy page with the password and to import the hashed password in the main code of the application?

[simrakausar]

I get error "invalid salt" in checkpw. I m writing a code for password authentication using socket programming in python.

[Parzalai]

Damn bro you explained this so well I'm gonna hash everything now

[joegodindata]

is there any way you could drop a tutorial similar to this that would include peppering

[jsceo]

if hashing is irreversible how checkpw checks if our password matches hash? don't get it

[MatteoMenozzi]

i must crypt some fields in db with python can i use the method who yyou show in this video ?

[jdchannelviewer]

If I have access to the hash file, why don't I just replace it with Hashes that I know??? Then access the system with my own set of passwords populating it...

[miguecastillo]

Can anybody tell me, what do you save on the database?, the varible "hashed" that he creates on the video?

[michellemassaad]

What app where you typing on before python ???

[biohazard]

How would i pass in a user input as the password? I keep getting the "TypeError: can only concatenate str (not "bytes") to str" error. Would it have to be something like

username = input("username: ")

Or would something need to go before it?

[srajith]

hey how to do that if password was taken from input ??

[xsuperman]

I get what this python tutorial and the lines of this script, thanks. But I am confused how this can be implemented in a production environment. Let's say I have an API key. I will use this to obtain a hashed API key and save it somewhere. In run time, do I ask user to enter the original string of the API key, and then I will hash this user-input API key, and then compare the newly hashed API key vs. the stored hashed API key? If so, how can I be sure when I use `bcrypt.hashpw()` on the newly entered API key, the resulting hashed string will be the same as the stored one? Can/should I save the `hashed = bcrypt.hashpw(password, bcrypt.gensalt())` inside the project directory, so when I hash the new API key, it should result the same hashed string?

[finessegod]

great content bro keep it up, ill be subscribing

[rryann]

THANK YOU VERY MUCH! Helped a lot ! Thanks again !! :)

[gandalfgrey]

I do not like the idea of having to grab the password from the database in order to run a check