April 8, 2024, 9:31 a.m. | /u/Iconic_gymnast

cybersecurity www.reddit.com

My lecturer told me to hash the password before sending it when writing an API login. However, I read blogs and asked in chats, and they said HTTPS already encrypts the password partially when sending it. Also, I'm using bcrypt with JWT already. Is it necessary to hash the password before sending it? For example, in the api/login in postman:

{

username: 'admin',

password: 'sa123456'

}

my lecturer wants it to be:

{

username: 'admin',

password: 'alsjlj2qoi!#@3ljsajf'

}

Could you …

api bcrypt blogs chats cybersecurity hash https jwt login password send send my writing

CyberSOC Technical Lead

@ Integrity360 | Sandyford, Dublin, Ireland

Cyber Security Strategy Consultant

@ Capco | New York City

Cyber Security Senior Consultant

@ Capco | Chicago, IL

Senior Security Researcher - Linux MacOS EDR (Cortex)

@ Palo Alto Networks | Tel Aviv-Yafo, Israel

Sr. Manager, NetSec GTM Programs

@ Palo Alto Networks | Santa Clara, CA, United States

SOC Analyst I

@ Fortress Security Risk Management | Cleveland, OH, United States