How does password hashing work in Passport.js?

How does password hashing work in Passport.js?

In Passport.js, password hashing is typically done using libraries like bcrypt. It securely hashes passwords before storing them.

Why is it important to hash passwords?

Hashing passwords is crucial for security. It protects user data by ensuring that even if the database is compromised, the actual passwords remain safe.

Can you show me a code example of password hashing with Passport.js?

Sure! Here's a simple example using bcrypt:

const bcrypt = require('bcrypt');

const password = 'myPlainPassword';
const saltRounds = 10;

bcrypt.hash(password, saltRounds, function(err, hash) {
  // Store hash in your password DB.
});

How do I verify a password after hashing?

You can verify a password using bcrypt's compare method. It checks if the provided password matches the hashed password.