Password encoding with BCrypt in Spring Boot - Mini Project: Build & Apply

Password encoding with BCrypt

📖 Scenario: You are building a simple Spring Boot application that needs to securely store user passwords. To protect user passwords, you will use the BCrypt password encoder, which hashes passwords so they are safe to save.

🎯 Goal: Build a Spring Boot component that encodes a plain text password using BCrypt and verifies the encoded password.

📋 What You'll Learn

Create a PasswordEncoder bean using BCryptPasswordEncoder

Encode a plain text password using the encode method

Verify the encoded password matches the original using the matches method

Use Spring Boot annotations and configuration patterns

💡 Why This Matters

🌍 Real World

Password encoding is essential to protect user credentials in web applications. BCrypt is a strong hashing algorithm that makes stored passwords secure against theft.

💼 Career

Understanding password encoding with BCrypt is a key skill for backend developers working on authentication and security in Java Spring Boot applications.

1

Create a plain text password variable

Create a String variable called rawPassword and set it to the exact value "mySecret123".

Spring Boot

// Create a String variable called rawPassword and assign it "mySecret123"
// Your code here

Need a hint?

Use String rawPassword = "mySecret123"; to store the password.

2

Create a BCryptPasswordEncoder bean

Create a BCryptPasswordEncoder object called passwordEncoder by instantiating new BCryptPasswordEncoder().

Spring Boot

String rawPassword = "mySecret123";
// Create a BCryptPasswordEncoder object called passwordEncoder
// Your code here

Need a hint?

Use BCryptPasswordEncoder passwordEncoder = new BCryptPasswordEncoder(); to create the encoder.

3

Encode the raw password

Use the encode method of passwordEncoder to encode rawPassword. Store the result in a String variable called encodedPassword.

Spring Boot

String rawPassword = "mySecret123";
BCryptPasswordEncoder passwordEncoder = new BCryptPasswordEncoder();
// Encode rawPassword using passwordEncoder.encode and store in encodedPassword
// Your code here

Need a hint?

Call passwordEncoder.encode(rawPassword) and assign it to encodedPassword.

4

Verify the password matches the encoded value

Use the matches method of passwordEncoder to check if rawPassword matches encodedPassword. Store the boolean result in a variable called isMatch.

Spring Boot

String rawPassword = "mySecret123";
BCryptPasswordEncoder passwordEncoder = new BCryptPasswordEncoder();
String encodedPassword = passwordEncoder.encode(rawPassword);
// Use passwordEncoder.matches to check rawPassword against encodedPassword and store in isMatch
// Your code here

Need a hint?

Use passwordEncoder.matches(rawPassword, encodedPassword) to verify the password.