dcodeIO / bcrypt.js

Optimized bcrypt in plain JavaScript with zero dependencies.
Other
3.47k stars 264 forks source link

How to decript password?????? #149

Open IoTManagerProject opened 9 months ago

IoTManagerProject commented 9 months ago

I use your package. I want to make password recovery system. All passwords now encripted by:

const hashPassword = bcrypt.hashSync(password, 7);

I need to decode password and get it. I able only compare bcrypt.compareSync. But i need GET IT?

Are you have way to get it??????????????????????????????????????

dcodeIO commented 9 months ago

The password becomes hashed and is no longer available in plain text.

CorentinDeBoisset commented 8 months ago

It is absolutely impossible to recover the password from the hash and that's the whole point of storing hashes : you can know if a given string is the right password by hashing it and comparing the result, but that's it.

The usual workflow when a password is lost is that the use will click on "forgotten password". Then, an email is sent to the address they have registerd when creating the account, and the user can reset their password.

aflatoon2874 commented 8 months ago

Is the library still valid for current use? No activity for last seven years.

ItaloRAmaral commented 6 months ago

@aflatoon2874 yes!

alexchu-dev commented 3 months ago

The concept of hashing a password is of computer science, we hash it to encrypt the password and by "hashing", you can only compare the result if it matches. There is no easy way for you to "undo" the hash, and therefore we are still using this bcrypt after 7 years of non-maintained status. If we can simply unhash it, this is going to be a totally untrusted internet with credential and password leak everywhere in the world.