DevByDJ / DevByDJ/Node-Server-Jest

Hash Passwords as they are stored in the database

Open
#7 0 comments 0 reactions 1 assignee Claimed by @DevByDJ View on GitHub
enhancement
Dominant language
JavaScript
Stars
0
Forks
0
PR merge metrics
No merged PRs in 30d

Description

# ISSUE
One security issue that needs to be addressed in the internship repository web application is the storage of user passwords. To increase security, it is vital that I implement password hashing. By hashing passwords, the application will store an encrypted version of the password instead of the plain text version. This ensures that even if the database is compromised, attackers cannot access the actual passwords.

# FIX
To fix this issue, we can use a reliable password hashing library such as “bcrypt”. Bcrypt allows for the creation of secure password hashes by automatically generating unique salts, which are then combined with the user's password. The hashing process is repeated multiple times to increase the computational complexity, making it harder for attackers to crack the hashes.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.