Client-side bcrypt

Will bcrypt be enabled on the client side?

The reason that i am asking is that i am working on an sftp client with anvil and there will be a form to enter credentials to the sftp server. The credentials are then passed to a anvil server side function.

Although https and anvil’s textbox with the “hidden” feature somewhat protects passwords from being read i plain text it would be awesome to use bcrypt at the client side :slight_smile:

Later today i will share my project.

“this is the way”

You dont need official support for that. bcrypt can be used client side with javascript

Hi @tobias.carlbom,

I suspect you probably don’t want to use bcrypt here - bcrypt is one-way, and if you’re building an sftp client you’ll need the password in clear-text on the server!

Best to keep the password in clear-text in the client, and send it over (all anvil.server.call() data is encrypted and runs over HTTPS). If you need to store those passwords longer-term, look at the Secrets Service encryption for a form of encryption that you can undo later.

PS: I’m very much looking forward to seeing this project in Show&Tell!

Thanks @meredydd for your response :slight_smile:

You will now find the project here: https://anvil.works/forum/t/sftp-client-with-anvil/16921