npm i mongoose-encryption
var secret = process.env.SOME_LONG_UNGUESSABLE_STRING; userSchema.plugin(encrypt, { secret: secret });