passlib_cryptcontext_password_hashing_verify_and_rehash.py

1from passlib.context import CryptContext
2
3# Create a CryptContext object which manages multiple password hashing algorithms.
4# "schemes" lists the algorithms allowed (bcrypt is the default recommendation).
5# "deprecated" marks old algorithms to be updated if encountered during verification.
6pwd_context = CryptContext(
7    schemes=["bcrypt"],
8    deprecated="auto",
9)
10
11# 1. Hashing a password
12password = "my secret password"
13hashed_password = pwd_context.hash(password)
14print(f"Hashed: {hashed_password}")
15
16# 2. Verifying a password
17# This returns True if the password matches, False otherwise.
18is_correct = pwd_context.verify("my secret password", hashed_password)
19print(f"Verification result: {is_correct}")
20
21# 3. Checking for password "upgrades"
22# This checks if the hash needs to be re-calculated because the settings 
23# or algorithms have changed since the hash was originally created.
24needs_update = pwd_context.needs_update(hashed_password)
25print(f"Needs update: {needs_update}")