# Ember.js authentication with salted + hashed password

**URL:** <https://discuss.emberjs.com/t/ember-js-authentication-with-salted-hashed-password/5645>\
**Category:** Uncategorized\
**Created:** [June 13, 2014, 10:57am UTC](https://discuss.emberjs.com/t/ember-js-authentication-with-salted-hashed-password/5645 "2014-06-13T10:57:07Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![bakura](https://sea1.discourse-cdn.com/flex019/user_avatar/discuss.emberjs.com/bakura/32/4398_2.png) [@bakura](https://discuss.emberjs.com/u/bakura)\
**Post date:** [June 13, 2014, 2:29pm UTC](https://discuss.emberjs.com/t/ember-js-authentication-with-salted-hashed-password/5645/2 "2014-06-13T14:29:17Z")

</div>

I’m not sure to understand, as the JavaScript code is readable, you can’t really hash your password client-side as you would need to expose the salt.

The way I’m doing is using HTTPS only, sending the password in clear text for registration, hashing it on server. Then my server never returns anything to the client (not even the hashed password), and only communicate to my API using an OAuth2 token (I really recommend you to use Ember-Simple-Auth for that).

That’s the simplest workflow.

---

_[View the full topic](https://discuss.emberjs.com/t/ember-js-authentication-with-salted-hashed-password/5645)._