Add Password Hashing with AI Prompts

Add bcrypt password hashing to my user registration and login.

Language: JavaScript/TypeScript/Python

Requirements:

1. Hash password on registration with bcrypt
2. Verify password on login
3. Use cost factor of 12 (adjust for your server)
4. Handle async operations properly
5. Clear plain text password from memory after hashing

Create helper functions:

• hashPassword(plainText) -> hash
• verifyPassword(plainText, hash) -> boolean

Also add:

• Password strength validation before hashing
• Timing-safe comparison
• Error handling for invalid hashes

Show me how to integrate with my user model.

Implement argon2 password hashing (more secure than bcrypt).

Language: JavaScript/TypeScript/Python

Use argon2id variant with recommended parameters:

• Memory: 64MB (65536 KB)
• Iterations: 3
• Parallelism: 4
• Hash length: 32 bytes

Create:

1. hashPassword function with argon2id
2. verifyPassword function
3. Configuration object for parameters
4. Migration helper from bcrypt to argon2

Handle:

• Systems with limited memory (fallback params)
• Async operations
• Error cases (invalid hash format)

Include parameter tuning guidance for my server specs.

My database has passwords stored in plain text. Create a migration plan.

Current state: passwords in plain text in users table

Migration strategy:

1. Add new 'password_hash' column
2. Keep old 'password' column temporarily
3. On each login, check old password and migrate to hash
4. Background job to force-reset unmigrated accounts
5. Eventually remove old column

Implementation needed:

• Migration script to add column
• Updated login flow that handles both
• Background job for forced resets
• Audit logging for migration progress
• Rollback plan if issues occur

Timeline: All passwords migrated within 30 days After migration: Force password reset for stragglers

Implement automatic rehashing when hash parameters are outdated.

Scenario: I increased bcrypt cost from 10 to 12 Old users have cost=10 hashes

On successful login:

1. Verify password against existing hash
2. Check if hash uses current parameters
3. If outdated, rehash with new parameters
4. Update stored hash

Implement:

• Function to check if hash needs upgrade
• Rehash and save after successful verification
• Support multiple hash algorithms (for migrations)
• Logging for rehash events

This ensures all active users get upgraded hashes without requiring password resets.