Express With Users implements
GitHub - node-argon2
for password hashing and verifying.
Results are computed for the password: P@ssw0rd. A page refresh will generate new hashes.
import argon2 from 'argon2';
...
const password = 'P@ssw0rd';
const hashedPassword1 = await argon2.hash(password);
const verified1 = await argon2.verify(hashedPassword1, password);
const hashedPassword2 = await argon2.hash(password);
const verified2 = await argon2.verify(hashedPassword2, password);
const invalidPassword = 'InvalidPassword';
const invalidResult = await argon2.verify(hashedPassword2, invalidPassword);
hashedPassword1:
$argon2id$v=19$m=65536,t=3,p=4$lGZhECzwP/DCgb4KDZ0lJw$7fsLxVs6azkZe0Q29O4tc4ZjrGrkCdaY5gFcypaXVPs
verified1: true
Same password, different hash.
hashedPassword2:
$argon2id$v=19$m=65536,t=3,p=4$4F5ygshPhuaXwWob18TJ+w$JeyOW52HNSLqra5i2NKEs8xfCAx/n5zAdnF97aBCY4E
verified2: true
Invalid password fails verification.
invalidResult: false