&gt; Passwords&#x2F;passphrases could be salted hashed by the browser in JavaScript using a PBKDF similar to scrypt or bcrypt, before being sent to the backend for constant-time comparison... it just takes a little more prudence and effort, but it&#x27;s absolutely doable.<p>This is not safe! Now an attacker just needs to intercept the hashed password and replay that, and he gets to login without knowing what the password is.<p>Use https. And don&#x27;t do client-side hashing, it&#x27;s no improvement.