Intermittent issue with Bcrypt package

Raj kumar

Using BCrypt package for encrypting and Verifying password. All works fine, But in some cases the encription in Not wrorking properly. Explained below in Detailed way.

Password = Password@123

When i try to hash and store date in Databse, It is storing it with 2 ways as mentioned below.

1 . Stores as expected = $2a$12$<>

2. Stores password as it is = $2a$12Password@123<>

Anyone help me with this and thanks in advance.

2 Replies

Know the answer? Post it — somebody with the same question will find it here.

Raj kumar5y ago
Hi, Thanks for your reply but changing it from Bcrypt to Pbkdf2 then do we need to Migrate old data?

Also is there any way we can use Bcrypt itself. Any idea on the root cause of the same?
Sachin Singh5y ago
if bcrypt is not working well then use Pbkdf2
pblic void Save(User user)
     {
         YourDbContext db = new YourDbContext();
         User User = new User();
         User.UserName = user.UserName;

         var crypto = new SimpleCrypto.PBKDF2();
         var EncryptedPassword = crypto.Compute(user.Password); // password includes salt , you will need this salt to compare psd in future.
         var Salt = crypto.Salt;  // this is the salt that has been used behind the scene.
         User.Password = EncryptPassword;
         User.Salt = Salt;

         db.Users.Add(User);
         db.SaveChanges();

       // do save with Ado.Net
     }


     /* if you want to check the same password is being entered by user as in database to confirm password/recovery*/
      public static bool IsValidPassword(string EnteredPassword)
     {
          var salt= /* fetch salt from database*/;
         var PasswordInDb=  /* fetch Password from database*/;
          var crypto = new SimpleCrypto.PBKDF2();
          string originalPassword = crypto.Compute(PasswordInDb,Salt);
        return crypto.Compare(originalPassword,EnteredPassword);  // it will return true/false;

     }