Skip to main content

PasswordHashingStrategy

Defines how sensitive user credentials like passwords and API-Keys get hashed.

Config

Hashing for passwords when using the NativeAuthenticationStrategy can be configured via the authOptions.passwordHashingStrategy property of your VendureConfig.

Hashing for API-Keys can be configured via the ApiKeyStrategy, more specifically authOptions.adminApiKeyStrategy.hashingStrategy and authOptions.shopApiKeyStrategy.hashingStrategy.

Signature

hash

method(plaintext: string) => Promise<string>

check

method(plaintext: string, hash: string) => Promise<boolean>
Was this chapter helpful?
Report Issue
Edited Feb 23, 2026ยทEdit this page