How to Hash and Verify Passwords in Python

import hashlib
import hmac
import secrets
from typing import Tuple


def hash_password(password: str, salt: str = None) -> Tuple[str, str]:
    """Hash a password with a random salt using PBKDF2-SHA256."""
    salt = salt or secrets.token_hex(16)
    hashed = hashlib.pbkdf2_hmac(
        "sha256", password.encode("utf-8"), salt.encode("utf-8"), 100_000
    )
    return hashed.hex(), salt


def verify_password(password: str, hashed: str, salt: str) -> bool:
    """Verify a password against a stored hash and salt."""
    candidate, _ = hash_password(password, salt)
    return hmac.compare_digest(candidate, hashed)


if __name__ == "__main__":
    password = "SecurePass123!"
    stored_hash, salt = hash_password(password)
    print(f"Hash: {stored_hash[:16]}...")
    print(f"Salt: {salt}")
    print(f"Verify correct: {verify_password(password, stored_hash, salt)}")
    print(f"Verify wrong: {verify_password('WrongPass', stored_hash, salt)}")