Why Password hashing with bcrypt in Node.js? - Purpose & Use Cases

The Big Idea

What if your users' passwords were stolen tomorrow? Bcrypt helps stop that nightmare.

The Scenario

Imagine you store user passwords as plain text in your database. If someone hacks your system, they get all passwords instantly.

The Problem

Storing plain passwords is risky and careless. Manually creating your own encryption is complicated and often insecure. It's easy to make mistakes that expose user data.

The Solution

Using bcrypt automatically hashes passwords with strong, tested algorithms and adds a unique salt. This makes stolen data useless to attackers.

Before vs After

✗ Before

const password = 'userpass123';
// Store password directly in DB
saveToDB(password);

✓ After

const bcrypt = require('bcrypt');
(async () => {
  const hashed = await bcrypt.hash('userpass123', 10);
  saveToDB(hashed);
})();

What It Enables

It enables secure password storage that protects users even if your database is compromised.

Real Life Example

When you sign up on a website, your password is hashed with bcrypt before saving, so even if hackers get the data, they can't see your real password.

Key Takeaways

Storing plain passwords is dangerous and easy to exploit.

Bcrypt hashes passwords with salt to keep them safe.

Using bcrypt protects users and builds trust in your app.