how avoid populate mongoose return password

JavaScript
password: { type: String, select: false }

Source

Also in JavaScript: