You should use a password-hash instead of the real password, that way your server wouldn't even know the users password.
Yup we uuse brcrypt. Im not talking about database. I’m talking about making a post request and the user info on the client side is on plain text
We're a place where coders share, stay up-to-date and grow their careers.
We strive for transparency and don't collect excess data.