Express With Users implements
GitHub - node-argon2
for password hashing and verifying.
Results are computed for the password: P@ssw0rd. A page refresh will generate new hashes.
import argon2 from 'argon2';
...
const password = 'P@ssw0rd';
const hashedPassword1 = await argon2.hash(password);
const verified1 = await argon2.verify(hashedPassword1, password);
const hashedPassword2 = await argon2.hash(password);
const verified2 = await argon2.verify(hashedPassword2, password);
const invalidPassword = 'InvalidPassword';
const invalidResult = await argon2.verify(hashedPassword2, invalidPassword);
hashedPassword1:
$argon2id$v=19$m=65536,t=3,p=4$UdFwfFxy7EhXC0m7dvNu2A$Enxt4jDYjxkyGqwzuwvG5P0kdHeMjvPLS6+k6QDo0W8
verified1: true
Same password, different hash.
hashedPassword2:
$argon2id$v=19$m=65536,t=3,p=4$Y0iXu7fiyg22cghoHx8Zsw$sC3rkdyjmKygTbN+VJTTuhzgFDE/Wt2UrXC9+Rbd+9U
verified2: true
Invalid password fails verification.
invalidResult: false