Node Auth Tutorial (JWT) #7 - Hashing Passwords

In this Node auth tutorial we'll see how to hash our passwords before saving them to the database using bcrypt.

🐱‍👤🐱‍👤 JOIN THE GANG -
----------------------------------------
🐱‍💻 🐱‍💻 My Udemy Courses:

🐱‍💻 🐱‍💻 Course Files:

🐱‍💻 🐱‍💻 Other Related Free Courses & Links:

🐱‍💻 🐱‍💻 Social Links:

[hytee]

I cannot explain how grateful I am for these videos. You're the best!

[destinlee]

Such a long weekend waiting for these. My current favorite stream show ;) Thanks again my man!!!

[thomaspattinson]

Please please please include a ‘forgot password’ section in this series where the user can reset their password. Thank you 🙏🏻

[jomarkpangan]

Commenting to help with youtube algorithm. I always forget to do this so
I will just go back to all the videos and comment. thank you so much
shaun. what a chad :D

[ezrakeeps]

I can never thank you enough for this😭🙏🙏

[nyhillius]

Hello,

Just a simpler way to hash password.

Use a mongoose setter to hash password every time the value is set or updated.

On your schema, on the password field, a set key -> {... type: String, set: value => hashPasswordFunction(value), ...}

It easier, simpler and it is working both in creation or edition.

[chemedev]

Great tut Ninja! I'd rather use .post('validate') so it doesn't hash the posts that doesn't pass the validation test, I think it would be little more efficient !

[shoaibkiyani]

I wish he could be my teacher while i was in university. He is expert in teaching and delivering content.

[eklavyasharma]

Hey Shaun! how to handle the min length of password characters when you are hashing the password before saving that means it won't do the validation. And after hashing the password, it will obviously be more than six characters.

[ET_Bermuda]

Dude, you're the best. I'd be willing to pay money to your site for more things like autocomplete search box, like/dislikes, follow, notifications & user messages

[drozerahwebdev]

Hi Shaun,
I think we don't want to encrypt if validation fails, what do you think ?

[shrhan]

3:38 In bcrypt, there is also genSaltSync, which does the same thing, except that its not asynchronous

4:21 There is also a function called hashSync, again not asynchronous.

[odaysayedahmad]

The believe the salt should be also saved in the DB near the hashed password, right? otherwise how can we check if the hashed password matches the hashed password without knowing the salt...

[andromilk]

By curiosity, I assume the salt can remain the same for all the hashed passwords?

[barackobam]

quick question : if a user didn't type his/her password correctly, what measures can I take to solve that problem?

[kbshegde]

Shaun please create a MERN stack course either in udemy or YouTube ....I would help a

[fredpourlesintimes]

Good to know, but I'm asking myself if there wouldn't exist a full ecosystem to create an app, including all the stuff you're introducing to us through this series. I head about Adonis as a pretty robust solution. But I have to confess that I don't feel like having enough knowledge to use it. As one of the creator of this framework said, there is a pretty long learning curve, and it requires that we are comfortable enough with a lot of web development technic bases.

[zsar_official]

My app crashes while import bcrypt ??what should I do

[naorii]

How update password with bcrypt? Save notwoking with update?. Please help me

[primetime]

Hey Shaun, do you have any plans to create a MERN stack course? I'm at the point where I've learned some react and node/express but I don't know how to mesh it all together into a single app. Your teaching style is so hard to come by in other courses/channels. Thank you for all you do :)