User model with password in Flask - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the purpose of hashing passwords in a User model?

Hashing passwords protects user data by converting the password into a secure, unreadable format. This way, even if the database is compromised, the actual passwords are not exposed.

beginner

Which Flask extension is commonly used to hash passwords securely?

Flask-Bcrypt is commonly used to hash passwords securely in Flask applications. It provides easy-to-use methods to hash and check passwords.

beginner

In a Flask User model, why should you never store the password as plain text?

Storing passwords as plain text is risky because if the database is leaked, attackers get direct access to user passwords. Hashing prevents this by storing only the hashed version.

intermediate

What is the typical method name used in a Flask User model to set a password securely?

A typical method is called set_password. It takes the plain password, hashes it, and stores the hashed password in the model.

intermediate

How do you verify a user's password during login in a Flask app?

You use a method like check_password that compares the hashed password stored in the database with the hash of the password entered by the user. If they match, the password is correct.

Which of these is the safest way to store user passwords in Flask?

A Hash passwords using Flask-Bcrypt

B Store passwords as plain text

C Encrypt passwords with reversible encryption

D Store passwords in cookies

Hashing passwords with Flask-Bcrypt is the safest because it is one-way and secure. Plain text and reversible encryption are unsafe.

What does the set_password method usually do in a Flask User model?

A Hashes the password and stores it

B Stores the password as plain text

C Deletes the password

D Sends the password by email

set_password hashes the password before storing it to keep it secure.

Which Flask extension helps with password hashing?

A Flask-Login

B Flask-Mail

C Flask-Bcrypt

D Flask-WTF

Flask-Bcrypt provides secure password hashing functions.

Why should passwords never be stored in plain text?

A It makes the database slower

B It risks exposing user passwords if leaked

C It wastes storage space

D It is required by Flask

Storing passwords in plain text risks exposing them if the database is compromised.

How do you check if a password entered by a user matches the stored password?

A Compare plain text passwords directly

B Use a random number generator

C Send password to admin for verification

D Hash the entered password and compare with stored hash

You hash the entered password and compare it to the stored hashed password to verify.

Explain how to create a User model in Flask that securely handles passwords.

Think about how to protect user passwords from being stolen.

Describe the steps to verify a user's password during login in a Flask app.

Focus on how to safely check passwords without revealing them.