# Compare password hashes

**URL:** <https://community.auth0.com/t/compare-password-hashes/111854>\
**Category:** Get Help\
**Tags:** user-password-management, user-management\
**Created:** [July 22, 2023, 2:12am UTC](https://community.auth0.com/t/compare-password-hashes/111854 "2023-07-22T02:12:32Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![ybdiel](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/ybdiel/32/45028_2.png) [@ybdiel](https://community.auth0.com/u/ybdiel)\
**Post date:** [July 22, 2023, 2:12am UTC](https://community.auth0.com/t/compare-password-hashes/111854/1 "2023-07-22T02:12:32Z")

</div>

Hello,  
In my implementation i have some scenarios that in order for my user to perform certain actions they need to first re-enter their password for validation (i.e delete profile, deactivate etc).  
How can i compare the password hash that i will be getting from the user’s input against the one that auth0 has? (Assuming all the users use username-password connection)

---

<div class="post-metadata">

**Author:** ![dan.woda](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dan.woda/32/18340_2.png) [@dan.woda](https://community.auth0.com/u/dan.woda)\
**Post date:** [July 28, 2023, 3:16pm UTC](https://community.auth0.com/t/compare-password-hashes/111854/3 "2023-07-28T15:16:17Z")

</div>

Hi @ybdiel,

Password hashes aren’t generally available (they can be exported, but require a support request), and we don’t suggest handling passwords unless absolutely necessary.

For the scenario you describe, I would suggest taking a look at [Add Step-up Authentication](https://auth0.com/docs/secure/multi-factor-authentication/step-up-authentication). This is the out-of-the-box way to handle this type of flow.

If you absolutely must send a password to Auth0 for comparison, you could use the [Resource Owner Password Flow](https://auth0.com/docs/get-started/authentication-and-authorization-flow/resource-owner-password-flow), **but this isn’t something I would recommend.**

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [August 11, 2023, 3:16pm UTC](https://community.auth0.com/t/compare-password-hashes/111854/4 "2023-08-11T15:16:35Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.