Hashing the password on the client doesn’t really gain you anything. The hash becomes the password (effectively), and you end up having to hash the hash on the

Hashing the password on the client doesn’t really gain you anything. The hash becomes the password (effectively), and you end up having to hash the hash on the server side to maintain security anyway. https://security.stackexchange.com/questions/8596/https-security-should-password-be-hashed-server-side-or-client-side https://security.stackexchange.com/questions/8596/https-secu...