Use HTTPS (TLS/SSL) for data in transit and encryption for data at rest. In a Node.js app using Express:
const https = require('https');
const fs = require('fs');
const options = {
key: fs.readFileSync('private-key.pem'),
cert: fs.readFileSync('public-cert.pem')
};
const server = https.createServer(options, app);