How to remove User's hashed-password (or any sensity information) from the responses

Questions and Answers
2

Hi!

I believe you need to use Strapi’s built-in sanitizeEntity() method on the data, just before you return a response, as described here:

It should remove any sensitive data like hashed passwords and private fields. Hope that helps!