Encrypt password at client side

Adeel Mirza 21

I am using SHA256 encryption technique to encrypt / decrypt password. But that Encrypt method is server side so while POST the password travels without getting encrypted. Is there a way I can encrypt it at client side using Ajax $.ajax ?

Viorel 114.7K Reputation points

2023-01-31T08:07:02.94+00:00

Maybe it is encrypted in case of HTTPS protocol?
Adeel Mirza 21 Reputation points

2023-02-01T05:19:59.7733333+00:00

I created function for encrypt and decrypt.
Jiale Xue - MSFT 43,046 Reputation points Microsoft Vendor

2023-02-01T09:12:13.07+00:00

Hi Adeel Mirza ,

I found you posted an answer, did you solve your problem?

Using ajax to encrypt on the client side is not secure, which makes your encryption vulnerable to being stolen.

It is not recommended that you use Ajax $.ajax encryption on the client side.

Best Regards,

Jiale
Adeel Mirza 21 Reputation points

2023-02-03T06:25:30.77+00:00

Thanks for the suggestion @Jiale Xue

Can you suggest me something better? How can I prevent the clear password traveling through the server when using POST?
Jiale Xue - MSFT 43,046 Reputation points Microsoft Vendor

2023-02-03T06:47:13.08+00:00

Hi Adeel Mirza ,As @Viorel said，You should try to use https for encryption, though it will add some cost.

1 answer

Adeel Mirza 21 Reputation points

2023-02-01T05:22:36.7166667+00:00

I created function for Encryption and decryption. In the database the passwords are stored in encrypted form. But that encryption method is server side, so while POST the password travels in plain text form, before getting encrypted. So that's a serious flaw.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Share via

Encrypt password at client side

1 answer