Skip to content

[Bug] : Teacher Passwords Stored in Plain Text #27

@Asifmd45

Description

@Asifmd45

Description

Teacher account credentials are stored in localStorage without any hashing or encryption. This allows passwords to be viewed directly through browser developer tools.

Steps to Reproduce

  1. Register or log in as a teacher.
  2. Open browser developer tools.
  3. Navigate to localStorage.
  4. Inspect stored teacher data.

Expected Behavior

Passwords should be hashed before storage and should never be stored in plain text.

Actual Behavior

Passwords are stored in plain text and can be read directly.

Environment

  • Browser: Chrome 125
  • OS: Windows 11
  • Node.js version: 20.x

Affected Page / Component

  • Landing
  • Login
  • Dashboard
  • Student Feedback
  • Analytics
  • Other: Authentication

Additional Context

This is a security concern and exposes user credentials to anyone with access to the browser storage.

Hey @rishima17 I would like to work on this issue under SSOC-2026..

Metadata

Metadata

Labels

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions