Strapi OOTB User DB Security

Questions and Answers
1

hi all,
I’m planning to build a website that allows users to sign up, pretty much whats described e.g. in Registration and Login (Authentication) with Vue.js & Strapi

Since users submit a password and personal information in this process: Is the way strapi stores this internally documented or ideally even audited?

I assume passwords are stored encrypted with a salt?

thanks for any help,
Ben

2

I assume passwords are stored encrypted with a salt?

That is correct.
For strapi basic fields are never encrypted except for passwords so or you need to write custom fields

1 Like