How do I use Bcrypt for password hashing in Flask?

How do I use Bcrypt for password hashing in Flask?

You can use the Flask-Bcrypt extension. First, install it using pip: pip install Flask-Bcrypt. Then, initialize it in your Flask app.

Can you show me a code example?

Sure! Here's a simple example:

from flask import Flask
from flask_bcrypt import Bcrypt

app = Flask(__name__)
bcrypt = Bcrypt(app)

# Hash a password
hashed_password = bcrypt.generate_password_hash('mysecretpassword').decode('utf-8')

# Check a password
is_correct = bcrypt.check_password_hash(hashed_password, 'mysecretpassword')

What if I want to store the hashed password in a database?

You can store the hashed_password in your database just like any other string. When a user logs in, retrieve the hashed password and use check_password_hash to verify.

Is Bcrypt secure enough for production use?

Yes, Bcrypt is considered secure for password hashing in production. It includes a work factor that makes it resistant to brute-force attacks.