Use strong passwords: Enforce strong password policies for user accounts, and use a secure password hashing algorithm such as bcrypt to store passwords securely.

[SamuelPull]

User passwords are adequately protected, and password complexity is enforced when NODE_ENV=production.

However, validation is done only on backend, and if password is insufficiently complex, very criptic message is displayed.

• Add salt if not used in hashing
• Make password requirements clear
• Add password complexity validation in FE (equal rules to backend validation)
• Ideally, password dialog should not close after entering weak password. Better UX is to provide feedback to the user what to do to correct any deficiencies and an opportunity to enter corrected data. This should be possible with FE validation?