How deeply does Build Python Web Apps with Streamlit cover bcrypt?

Explains hashing, salts, and password comparison practically, while deferring bcrypt's internal algorithm details.

Bcrypt

As explained in Build Python Web Apps with Streamlit

bcrypt is a password-hashing library and algorithm implementation designed to make password guessing computationally expensive.

bcrypt protects user passwords by storing computationally expensive hashes instead of the original passwords. If a database leaks, the stored hash cannot simply be entered into the application as the password. section 8.3.2

Hash and verify a password

Install bcrypt with pip, then hash a password with bcrypt.hashpw(password.encode(), bcrypt.gensalt()).decode(). The random salt helps defend against rainbow-table lookups. During login, bcrypt.checkpw compares the entered password with the stored hash and returns True when they match. section 8.3.2

How Build Python Web Apps with Streamlit covers it

Cover of Build Python Web Apps with Streamlit

liveBook manning.com

Read Build Python Web Apps with Streamlit on liveBook Get the book at manning.com

Also explained in

liveBook manning.com

The Well-Grounded Python Developer: How the pros use Python and Flaskbcrypt is a computationally expensive password-hashing algorithm designed to resist brute-force guessing.
liveBook manning.com

Grokking Web Application Securitybcrypt is an adaptive password-hashing function designed to make password guessing computationally expensive.

Compare how 3 books explain bcrypt →

Related concepts

BCryptPasswordEncoderused by · BCryptPasswordEncoder is a Spring Security PasswordEncoder implementation that hashes passwords using the bcrypt password-hashing function.
hash functionkind of · A hash function deterministically maps input data to a value in a bounded output range, commonly for indexing, lookup, comparison, or integrity checking.
Flask-Bcryptused by · Flask-Bcrypt is a Flask extension that provides bcrypt password hashing and verification.
password hashinguses · Password hashing is the use of a one-way, deliberately costly function to derive values for securely storing and verifying passwords without retaining the original passwords.
cryptographic hashproduces · A cryptographic hash is a fixed-length digest computed from input data by a deterministic function designed to resist preimage, second-preimage, and collision attacks.

This explainer was generated by Manning's knowledge graph from the text of Build Python Web Apps with Streamlit. The section links point to the parts of the book it draws on.