Server Side Encryption and Client side Decryption

[krivopustov (Konstantin Krivopustov)]

You should set up HTTPS on the server, it’s a common solution to secure data exchange.
See explanation from Mario here: Hiding Password of the user - #2 by mario