diff --git a/client/src/components/AuthForm.tsx b/client/src/components/AuthForm.tsx
index 2cffe97..0184c12 100644
--- a/client/src/components/AuthForm.tsx
+++ b/client/src/components/AuthForm.tsx
@@ -32,11 +32,15 @@ const AuthForm: React.FC = () => {
   const [password, setPassword] = useState("");
   const [isLogin, setIsLogin] = useState(true);
 
+  //added
+  const [showPassword, setShowPassword] = useState(false);
+
   const [login] = useMutation(LOGIN);
   const [register] = useMutation(REGISTER);
 
   const handleSubmit = async (e: React.FormEvent) => {
     e.preventDefault();
+
     try {
       const mutation = isLogin ? login : register;
       const result = await mutation({ variables: { username, password } });
@@ -72,10 +76,8 @@ const AuthForm: React.FC = () => {
           </h2>
 
           {/* Form */}
-          <form
-            onSubmit={handleSubmit}
-            className="flex flex-col space-y-4 w-full max-w-md"
-          >
+          <form onSubmit={handleSubmit}
+            className="flex flex-col space-y-4 w-full max-w-md">
             <input
               className="rounded-lg border border-gray-300 px-4 py-2 focus:outline-none focus:ring-2 focus:ring-[color:var(--teal)] bg-white text-black"
               type="text"
@@ -83,30 +85,91 @@ const AuthForm: React.FC = () => {
               placeholder="Username"
               onChange={(e) => setUsername(e.target.value)}
             />
+            <div className="relative">
             <input
               className="rounded-lg border border-gray-300 px-4 py-2 focus:outline-none focus:ring-2 focus:ring-[color:var(--teal)] bg-white text-black"
-              type="password"
+              type={showPassword ? "text" : "password"}
               value={password}
               placeholder="Password"
               onChange={(e) => setPassword(e.target.value)}
             />
-            <Button type="submit" className="w-full">
-              {isLogin ? "Login" : "Register"}
-            </Button>
-          </form>
+            {/* <input
+              className="rounded-lg border border-gray-300 px-4 py-2 focus:outline-none focus:ring-2 focus:ring-[color:var(--teal)] bg-white text-black"
+              type="password"
+              value={password}
+              placeholder="Password"
+              onChange={(e) => setPassword(e.target.value)}
+            /> */}
+            <button
+              type="button"
+              onClick={() => setShowPassword(!showPassword)} className="absolute right-3 top-1/2 transform -translate-y-1/2 text-gray-600 hover:text-[color:var(--teal)]"
+              tabIndex={-1}
+              aria-label={showPassword ? "Hide password" : "Show password"}
+            >
+              {showPassword ? (
 
-          {/* Toggle Login/Register */}
-          <button
-            onClick={() => setIsLogin(!isLogin)}
-            className="mt-4 text-sm text-[color:var(--prussian)] hover:underline"
-          >
-            {isLogin
-              ? "Need an account? Register"
-              : "Already have an account? Login"}
-          </button>
+                <svg
+                  xmlns="http://www.w3.org/2000/svg"
+                  className="h-5 w-5"
+                  fill="none"
+                  viewBox="0 0 24 24"
+                  stroke="currentColor"
+                >
+                  <path
+                    strokeLinecap="round"
+                    strokeLinejoin="round"
+                    strokeWidth={2}
+                    d="M15 12a3 3 0 11-6 0 3 3 0 016 0z"
+                  />
+                  <path
+                    strokeLinecap="round"
+                    strokeLinejoin="round"
+                    strokeWidth={2}
+                    d="M2.458 12C3.732 7.943 7.523 5 12 5c4.478 0 8.268 2.943 9.542 7-1.274 4.057-5.064 7-9.542 7-4.477 0-8.268-2.943-9.542-7z"
+                  />
+                </svg>
+              ) : (
+
+                <svg
+                  xmlns="http://www.w3.org/2000/svg"
+                  className="h-5 w-5"
+                  fill="none"
+                  viewBox="0 0 24 24"
+                  stroke="currentColor"
+                >
+                  <path
+                    strokeLinecap="round"
+                    strokeLinejoin="round"
+                    strokeWidth={2}
+                    d="M13.875 18.825A10.05 10.05 0 0112 19c-4.478 0-8.268-2.943-9.542-7a9.992 9.992 0 012.518-4.037m1.682-1.683A9.953 9.953 0 0112 5c4.477 0 8.268 2.943 9.542 7a9.956 9.956 0 01-1.533 3.25M15 12a3 3 0 11-6 0 3 3 0 016 0z"
+                  />
+                  <path
+                    strokeLinecap="round"
+                    strokeLinejoin="round"
+                    strokeWidth={2}
+                    d="M3 3l18 18"
+                  />
+                </svg>
+              )}
+            </button>
         </div>
-      </Card>
+        <Button type="submit" className="w-full">
+          {isLogin ? "Login" : "Register"}
+        </Button>
+          </form>
+
+      {/* Toggle Login/Register */}
+      <button
+        onClick={() => setIsLogin(!isLogin)}
+        className="mt-4 text-sm text-[color:var(--prussian)] hover:underline"
+      >
+        {isLogin
+          ? "Need an account? Register"
+          : "Already have an account? Login"}
+      </button>
     </div>
+      </Card >
+    </div >
   );
 };
 
diff --git a/server/src/utils/auth.ts b/server/src/utils/auth.ts
index 9c79298..2185e7c 100644
--- a/server/src/utils/auth.ts
+++ b/server/src/utils/auth.ts
@@ -1,5 +1,6 @@
 import jwt from "jsonwebtoken";
 import dotenv from "dotenv";
+
 dotenv.config();
 
 const secret = process.env.JWT_SECRET!;
@@ -9,7 +10,9 @@ export function signToken(user: { _id: string; username: string }) {
   return jwt.sign({ data: user }, secret, { expiresIn: expiration });
 }
 
+
 export function authMiddleware({ req }: any) {
+
   let token = req.headers.authorization || "";
 
   if (token.startsWith("Bearer ")) {