How do I check if Bcrypt password is correct?

Question

I was using md5 to hash my passwords but learned that using bcrypt was more secure.

When using md5, it was easy to check whether a password entered in a form was correct. I simply done

if(md5($request->password) == $user->password)
   //Login or whatever

So how do I do this using bcrypt? I tried

if(bcrypt($request->password) == $user->password)

But that isn't working.

Also note, in your example, you're hashing the value from the database and comparing it to what the user typed. That's backwards -- you want to hash the value the user typed and compare it to the database. — Alex Howansky
– Alex Howansky, Commented Apr 21, 2017 at 15:41

Community · Accepted Answer · 2023-11-17 20:42:18Z

4

Use the attempt() method:

if (Auth::attempt(['email' => $email, 'password' => $password]))

The attempt method accepts an array of key/value pairs as its first argument. The values in the array will be used to find the user in your database table.

https://laravel.com/docs/5.4/authentication#authenticating-users

Under the hood attempt() uses password_verify() method to check password.

edited Nov 17, 2023 at 20:42

CommunityBot

11 silver badge

answered Apr 21, 2017 at 15:38

Alexey Mezenin

164k27 gold badges309 silver badges287 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

linktoahref · Accepted Answer · 2017-04-21 16:59:50Z

1

You could also use the check method of the Hash Facade

if (Hash::check($request->password, $user->password)) {
    // The passwords match...
}

https://laravel.com/docs/5.4/hashing#basic-usage

edited Apr 21, 2017 at 16:59

answered Apr 21, 2017 at 16:53

linktoahref

8,0273 gold badges32 silver badges54 bronze badges

Collectives™ on Stack Overflow

How do I check if Bcrypt password is correct?

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related