Why User model with password in Flask? - Purpose & Use Cases

The Big Idea

What if your password database got stolen--would your users still be safe?

The Scenario

Imagine building a website where users sign up and log in. You try to store their passwords as plain text in your database.

Every time someone logs in, you check the password by comparing it directly.

The Problem

Storing passwords as plain text is risky. If someone hacks your database, all user passwords are exposed.

Also, manually checking passwords without hashing is insecure and can lead to data breaches.

The Solution

Using a User model with password hashing automatically secures passwords by storing only encrypted versions.

This way, even if the database is compromised, real passwords stay safe.

Before vs After

✗ Before

password = request.form['password']
if password == user.password:
    login_user(user)

✓ After

from werkzeug.security import check_password_hash
if check_password_hash(user.password_hash, request.form['password']):
    login_user(user)

What It Enables

It enables safe user authentication by protecting passwords with encryption, building trust and security.

Real Life Example

Popular websites never store your real password. They use hashed passwords so even if hackers get data, your password stays secret.

Key Takeaways

Storing plain passwords is unsafe and risky.

User models with password hashing protect user data.

This approach builds secure and trustworthy login systems.