- Implement decode, encode logic to ensure security (doesn't has to be complicated) - Sign up -> encode password before POST to database - Sign in -> After query decode password and check with the client password - Reset password -> Encode and PUT to database - ....... To be updated