Are passwords created with auth.signin already encrypted?

[pearlslugs]

I started to use bcrypt to send passwords, but I realized I didn't know how to compare passwords or if you even could do such a thing.

Do I not need to hash passwords?

[inian]

Yes, the passwords are hashed with bcrypt before they are stored in the database. You needn't do that in the application layer.