It's completely standard. If you encrypt the password in the browser, potential hackers have access to the encryption code which makes it useless. Check the ne

It's completely standard. If you encrypt the password in the browser, potential hackers have access to the encryption code which makes it useless. Check the network tab in dev-tools when logging in to hn for example and you'll see your password in the request body :)