Open IoTManagerProject opened 1 year ago
The password becomes hashed and is no longer available in plain text.
It is absolutely impossible to recover the password from the hash and that's the whole point of storing hashes : you can know if a given string is the right password by hashing it and comparing the result, but that's it.
The usual workflow when a password is lost is that the use will click on "forgotten password". Then, an email is sent to the address they have registerd when creating the account, and the user can reset their password.
Is the library still valid for current use? No activity for last seven years.
@aflatoon2874 yes!
The concept of hashing a password is of computer science, we hash it to encrypt the password and by "hashing", you can only compare the result if it matches. There is no easy way for you to "undo" the hash, and therefore we are still using this bcrypt after 7 years of non-maintained status. If we can simply unhash it, this is going to be a totally untrusted internet with credential and password leak everywhere in the world.
I use your package. I want to make password recovery system. All passwords now encripted by:
const hashPassword = bcrypt.hashSync(password, 7);
I need to decode password and get it. I able only compare bcrypt.compareSync. But i need GET IT?
Are you have way to get it??????????????????????????????????????