12-09-2016, 10:07 PM
Bcrypt is purposely not deterministic which means that entering the same password over and over again will give you different results. That is a good thing with password hashing. If you noticed that both of the default user accounts have the same password of password but when you look at them in the database they look completely different. This means that if someone was able to hack one password in the database they would not automatically have the key to all the rest of the passwords.