diff --git a/app/security.py b/app/security.py
new file mode 100644
index 0000000..a1e3a9f
--- /dev/null
+++ b/app/security.py
@@ -0,0 +1,9 @@
+import bcrypt
+
+
+def hash_password(password: str) -> str:
+    return bcrypt.hashpw(password.encode(), bcrypt.gensalt()).decode()
+
+
+def verify_password(plain: str, hashed: str) -> bool:
+    return bcrypt.checkpw(plain.encode(), hashed.encode())