How to apply client side password encryption in laravel

Question

In my registration form I am sending username and password from signup form to my controller and storing after password encryption.

In think I should first encrypt password at client side and then send to my controller(server side)so that my data is secure from packet capturing.

Now I am looking for your idea or guidance for any available feature for this if any.

Thanks for your time.

Answer 1

While you can encrypt data client-side; it offers virtually no protection as man-in-the-middle attacks can still occur before the data is encrypted, which would leak the data to the attacker regardless.

Your best option is to get an SSL cert. You don't have to get a professional / paid one; a self-signed one will do just fine if you have a small / personal website. Encrypting data client-side will only give a false sense of security.

Answer 2

This is exactly what HTTPS is for :)