:: a typeCtrl KGHC 9.10.3 · lts/ghc-9.10.x · 248f8f0 · 2026-10-05
Modulepassword-types-1.0.0.0Haskell2010
This library provides datatypes for interacting with passwords. It provides the types Password and PasswordHash, which correspond to plain-text and hashed passwords.
There is an accompanying password-instances package that provides canonical typeclass instances for Password and PasswordHash for many common typeclasses, like FromJSON from aeson, PersistField from persistent, etc.
See the password-instances package for more information.
The PasswordHash and Salt data types have a phantom type parameter to be able to make sure salts and hashes can carry information about the algorithm they should be used with.
For example, the bcrypt algorithm requires its salt to be exactly
16 bytes (128 bits) long, so this way you won't accidentally use a
Salt PBKDF2 when the hashing function requires a Salt Bcrypt.
And checking a password using bcrypt would obviously fail if checked
against a PasswordHash PBKDF2.
A plain-text password.
This represents a plain-text password that has NOT been hashed.
You should be careful with Password. Make sure not to write it to logs or store it in a database.
You can construct a Password by using the mkPassword function or as literal
strings together with the OverloadedStrings pragma (or manually, by using
fromString on a String). Alternatively, you could also use some of the
instances in the password-instances
library.
Construct a Password
A hashed password.
This represents a password that has been put through a hashing function. The hashed password can be stored in a database.
Eq (PasswordHash a)Defined in password-types-1.0.0.0 · Data.Password.TypesOrd (PasswordHash a)Defined in password-types-1.0.0.0 · Data.Password.TypesRead (PasswordHash a)Defined in password-types-1.0.0.0 · Data.Password.TypesShow (PasswordHash a)Defined in password-types-1.0.0.0 · Data.Password.TypesThis is an unsafe function that shows a password in plain-text.
unsafeShowPassword ("foobar" :: Password)"foobar"
You should generally not use this function in production settings, as you don't want to accidentally print a password anywhere, like logs, network responses, database entries, etc.
This will mostly be used by other libraries to handle the actual password internally, though it is conceivable that, even in a production setting, a password might have to be handled in an unsafe manner at some point.
A salt used by a hashing algorithm.