Password hashing with bcrypt in Express - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to import bcrypt in an Express app.

Express

const bcrypt = require('[1]');

Drag options to blanks, or click blank then click option'

Acors

Bexpress

Cbody-parser

Dbcrypt

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'express' instead of 'bcrypt' in require statement.

Forgetting to import bcrypt before using it.

We import the bcrypt library by requiring 'bcrypt'. This allows us to use bcrypt functions for password hashing.

2fill in blank

medium

Complete the code to hash a password asynchronously using bcrypt.

Express

const hashedPassword = await bcrypt.[1](password, 10);

Drag options to blanks, or click blank then click option'

Ahash

Bcompare

CgenSalt

Dverify

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'compare' instead of 'hash' to create a hash.

Not awaiting the asynchronous hash function.

The hash function creates a hashed version of the password using a salt rounds value (10 here).

3fill in blank

hard

Fix the error in the code to compare a plain password with a hashed password.

Express

const isMatch = await bcrypt.[1](password, hashedPassword);

Drag options to blanks, or click blank then click option'

Ahash

BgenSalt

Ccompare

Dencrypt

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'hash' instead of 'compare' to check passwords.

Passing arguments in wrong order.

The compare function checks if the plain password matches the hashed password.

4fill in blank

hard

Fill both blanks to generate a salt and then hash a password using that salt.

Express

const salt = await bcrypt.[1](12);
const hashed = await bcrypt.[2](password, salt);

Drag options to blanks, or click blank then click option'

AgenSalt

Bcompare

Chash

Dencrypt

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'compare' instead of 'genSalt' or 'hash'.

Not awaiting the asynchronous functions.

First, genSalt creates a salt with 12 rounds. Then, hash uses that salt to hash the password.

5fill in blank

hard

Fill all three blanks to create a function that hashes a password and returns the hashed value.

Express

async function [1](password) {
  const salt = await bcrypt.[2](10);
  const hash = await bcrypt.[3](password, salt);
  return hash;
}

Drag options to blanks, or click blank then click option'

AhashPassword

BgenSalt

Chash

Dcompare

Attempts:

3 left

💡 Hint

Common Mistakes

Naming the function incorrectly.

Mixing up the order of salt generation and hashing.

This function named hashPassword generates a salt with 10 rounds, hashes the password with that salt, and returns the hashed password.