I know that bcrypt doesn't encrypt, but how easy would it be to get the password from a stored bcrypt hash?
I wanna split my question about bcrypt into 2:
I read over here that bcrypt generates random salts for every hashing it does. How can 2 different "hashing-actions" with the same number of rounds and the same password have the same output if bcrypt generates a random salt for every time you hash something?
BCRYPT saves the output hash, the salt and the number of rounds with the kind of algorithm version. The output would be something like this:
You basically have everything the Algorithm needs except the input, but for that you have the output instead. Wouldn't that make it pretty easy to decrypt / un-hash the password back to its original state?