How to make a secure frontend and backend?

Hey! So I know this discord is probably mostly CSS related but I figured y'all would probably be able to help or point me to resources. I'm in a full stack web development boot camp. In my boot camp, we haven't really focused too much on security. Like we've been using HTTP instead of HTTPS and even though we recently learned how to use bcrypt to hash passwords before saving them to a database, the user still sends the unencrypted password to the API...so if someone is sniffing the traffic, they can get the password.

So how do you ACTUALLY make a backend server and frontend UI that is actually secure? How can I make it so that my code uses HTTPS? How do I make it so that data isn't sent insecurely?

How would I make something like a diary app where a user could create diary entries that are stored securely on the server and the owner of that entry is the ONLY person who ever sees the unencrypted version?

Tech we've been using: JavaScript, React, Node, Express but I'm open to learning other things. I'd prefer to use JavaScript if possible though. Thanks!
Was this page helpful?