Securely Hash and Verify Passwords with Python Bcrypt

import bcrypt

def hash_password(password):
    """Hashes a password using bcrypt."""
    # Generate a salt and hash the password
    # bcrypt.gensalt() generates a random salt.
    # bcrypt.hashpw() returns bytes, so decode to utf-8 for storage.
    hashed = bcrypt.hashpw(password.encode('utf-8'), bcrypt.gensalt())
    return hashed.decode('utf-8')

def verify_password(password, hashed_password):
    """Verifies a password against a stored hash."""
    # hashpw requires bytes for both password and the stored hash
    return bcrypt.checkpw(password.encode('utf-8'), hashed_password.encode('utf-8'))

# Example Usage:
user_password = "MySuperSecretPassword123!"

# 1. Hash the password
stored_hashed_password = hash_password(user_password)
print(f"Original Password: {user_password}")
print(f"Hashed Password (stored in DB): {stored_hashed_password}")

# 2. Verify a correct password
if verify_password(user_password, stored_hashed_password):
    print("Password verification SUCCESS: Correct password provided.")
else:
    print("Password verification FAILED: Incorrect password provided.")

# 3. Verify an incorrect password
wrong_password = "WrongPassword!"
if verify_password(wrong_password, stored_hashed_password):
    print("Password verification FAILED: Incorrect password was accepted (ERROR!).")
else:
    print("Password verification SUCCESS: Incorrect password rejected.")

# Note: Stored hashes are unique even for the same password due to the random salt.
another_hash = hash_password(user_password)
print(f"Another hash for the same password: {another_hash}")