verifyBCryptHash

This function compares a plaintext entry to the hashed string.
NOTE 1:Hashing is one-way, so you can't "decrypt" a hashed value. You have to hash the value you want to check and then compare that to the saved hash.
NOTE 2: The version and rounds don't need to be specified because they are included at the beginning of the hashed string.

verifyBCryptHash(plaintext,hashedstring); → returns boolean

This function requires Adobe ColdFusion 2021 and up. Not supported on Lucee, etc.

Links more information about verifyBCryptHash

OWASP Password Storage Cheat Sheet - General advice from OWASP about how to work with passwords.

Using Password4j And The BCrypt, SCrypt, And Argon2 Password Hashing Algorithms In Lucee CFML 5.3.7.47 - Blog by Ben Nadel about using hashing algorithms.

Best practices for password hashing and storage - IETF info on password hashing best practices.

Hashing Passwords: One-Way Road to Security - Blog by Dan Arias on password hashing strategies.

bcrypt - Wikipedia article about BCrypt.

Using BCrypt in Lucee - As of Lucee 5, this function has not been added yet. But this is a discussion of how to implement BCrypt in Lucee.

CFPASSPhrase - Related project to help other engines utilize hashing functions.

Examples

Sample code invoking the verifyBCryptHash function

Example of Verifying the BCrypt Hash

This is an example of using the function to check against a hashed value.

secretMsg="$2a$10$.jQX1KnwPzhvVet0vEENnOlO8C70oM8GQhu0MQnCgcIlWhguWb3q.";
checkMe="My voice is my passport. Verify me."
writeOutput(verifyBCryptHash(checkMe,secretMsg);

Expected Result: YES

Example of Verifying the BCrypt Hash With Options Set On Hash

This is an example of using the function to check against a hashed value when the options were previously set.

secretMsg="$2b$05$Cf4c5OFks8s8QKrByuEA7OHQDKSKPs5217L0H1DowfFLY3RLbFi4a";
checkMe="Setec Astronomy"
writeOutput(verifyBCryptHash(checkMe,secretMsg);

Expected Result: YES

Signup for cfbreak to stay updated on the latest news from the ColdFusion / CFML community. One email, every friday.

verifyBCryptHash

Argument Reference

plaintext string
Required

hashedstring string
Required

Links more information about verifyBCryptHash

Examples
Sample code invoking the verifyBCryptHash function

Example of Verifying the BCrypt Hash

Example of Verifying the BCrypt Hash With Options Set On Hash

verifyBCryptHash

Argument Reference

plaintext string Required

hashedstring string Required

Links more information about verifyBCryptHash

Examples Add An Example Sample code invoking the verifyBCryptHash function

Example of Verifying the BCrypt Hash

Example of Verifying the BCrypt Hash With Options Set On Hash

plaintext string
Required

hashedstring string
Required

Examples
Sample code invoking the verifyBCryptHash function