dsh-bcrypt

Password hashing is the most fundamental yet most easily overlooked security step in admin-facing systems. Many teams offload it to a backend API or a third-party service, which means the raw credential leaves the local machine at some point. dsh-bcrypt takes a simpler path: it wraps the two mainstream slow-hash algorithms, PBKDF2 and scrypt, into a pure-Node, fully local tool with zero network calls and no external service dependencies. The password never leaves your host.

Once installed, the plugin registers hash tools directly into the current session. You invoke them conversationally to complete a full password-derivation flow in place, with no extra HTTP server to stand up and no browser-side library to pull in. The implementation relies on Node's built-in crypto module, keeping the dependency footprint minimal and the code straightforward to audit.

If you are adding local password-hashing capability to an internal admin panel, a CLI management tool, or an agent workflow, and you want to avoid any additional network hop or heavyweight dependency, dsh-bcrypt offers a lightweight, transparent option. It suits security engineers, solo developers, and any admin project where data residency is a hard requirement.