DEV Community

[Comment from a deleted post]
Collapse
 
negue profile image
negue

You should use a password-hash instead of the real password, that way your server wouldn't even know the users password.

Collapse
 
artoodeeto profile image
aRtoo

Yup we uuse brcrypt. Im not talking about database. Iā€™m talking about making a post request and the user info on the client side is on plain text