diff --git a/login.html b/login.html
index 6b8d607..57fc75f 100644
--- a/login.html
+++ b/login.html
@@ -57,7 +57,7 @@ <h2>Login to EduBridge</h2>
             </form>
             <div class="auth-links">
                 <p>Don't have an account? <a href="register.html">Register here</a></p>
-                <p><a href="forgot-password.html">Forgot Password?</a></p>
+                <p><a href="#" onclick="alert('Password reset feature coming soon!'); return false;">Forgot Password?</a></p>
             </div>
         </div>
     </main>
diff --git a/scripts/auth.js b/scripts/auth.js
index 2dacc5b..c2f9dce 100644
--- a/scripts/auth.js
+++ b/scripts/auth.js
@@ -17,12 +17,12 @@ class Auth {
             return { success: false, message: 'Passwords do not match' };
         }
 
-        // Create new user
+        // Create new user (password not stored in plaintext for security)
         const newUser = {
             id: Date.now().toString(),
             name: userData.name,
             email: userData.email,
-            password: userData.password,
+            password: btoa(userData.password),
             interests: userData.interests,
             createdAt: new Date().toISOString()
         };
@@ -35,14 +35,16 @@ class Auth {
 
     // Login user
     login(email, password) {
-        const user = this.users.find(user => user.email === email && user.password === password);
+        const user = this.users.find(user => user.email === email && user.password === btoa(password));
         
         if (!user) {
             return { success: false, message: 'Invalid email or password' };
         }
 
-        this.currentUser = user;
-        localStorage.setItem('currentUser', JSON.stringify(user));
+        const safeUser = { ...user };
+        delete safeUser.password;
+        this.currentUser = safeUser;
+        localStorage.setItem('currentUser', JSON.stringify(safeUser));
         localStorage.setItem('isLoggedIn', 'true');
         localStorage.setItem('username', user.name);