Biratnagar, Koshi Province · NepalSunday, 13 September 2026

Bivaas Baral

Full-stack developer · frontend-focused · security-aware

About · in my own words

Clean interfaces, and the boring parts done properly.

Bivaas Baral
Bivaas Baral

I am Bivaas Baral, a full-stack developer from Biratnagar, in Nepal’s Koshi Province. For about two years I’ve been building web applications and putting them in front of real people. Mostly React and Next.js at the front, with Node.js, Express and MongoDB behind them, all deployed on Vercel.

The frontend gets most of my attention, because that’s where people actually meet the software. But I learned enough of the backend that the unglamorous parts aren’t somebody else’s problem. I’ve shipped OAuth and one-time-code logins, AES-GCM encryption, and the sort of security headers nobody notices until they’re missing. I hold the APIsec Certified Practitioner certification, which I went for because I wanted to understand what I was shipping rather than hope it was fine.

I like pulling things apart to see how they hold together. How networks behave, how attacks actually work, why a decision made in the first week turns into a bug six months later.

I grew up speaking Nepali and I work in English. I went to Everest Secondary School, and I’m an undergraduate now.

Everest Hack Club

In August 2025 I started Everest Hack Club, an official Hack Club chapter in Biratnagar. It’s free and it’s run by teenagers. The whole thing works on one loop: build something small, bring it to the weekly meetup, let people tell you what’s broken, ship it anyway, and start the next one. Plenty of members turn up knowing nothing at all, and they get further sitting next to someone three steps ahead than they would with any course.

Daydream Biratnagar 2025

On 28 September 2025, Arniko Hack Club ran Daydream Biratnagar 2025, the biggest teen hackathon in Nepal: more than 250 participants, 24 hours, and a theme nobody saw until the clock started. There were two of us on Team Alpha. We built Echo Trails, a map of verified local services for visitors to Nepal, and it took first place. I’ve written up the whole twenty-four hours, and ICT Frame covered the event at the time.

Campfire Biratnagar

Five months later the same club ran Campfire Biratnagar, from 28 February – 1 March 2026. A game jam this time rather than a hackathon, and Nepal’s leg of Hack Club’s Campfire, which happened in more than 200 cities at once. 24 hours to build a game from nothing. It was the first game jam I had ever entered. I got through the peer-voting round, and then I didn’t place.

I’d still go back tomorrow. That one day taught me more about cutting scope than a month of web work had. Games break in ways web apps don’t, and I spent the last few hours fixing things I should have thrown out at the start.

Horizons Arcana, Singapore

In August 2026 I flew to Singapore for Horizons Arcana, Hack Club’s Horizons hackathon for Asia. You don’t register for that one, you qualify for it, and I did. Three days, and a hundred or so teenage builders from across the continent.

We built 6 7, a game you play with a webcam instead of a keyboard. Hand-gesture recognition maps the 6 7 emote to firing, and head-pose tracking moves your character as you lean. The theme we were handed was a photograph of a door marked room 0607, so we took the zeros out.

What I work with

Languages
JavaScript, TypeScript, Python
Frontend
React, Next.js (App Router), Tailwind CSS, shadcn/ui, Framer Motion
Backend & data
Node.js, Express, MongoDB, Firebase, Supabase
Auth & security
NextAuth, OAuth, OTP flows, AES-GCM encryption, secure headers, API security testing
Shipping
Vercel, Render, Git & GitHub, Postman, Figma

Credentials

  • APIsec Certified Practitioner API security testing
  • Everest Secondary School alumnus
  • Undergraduate current

Getting hold of me

My main site is bivaasbaral.com.np. The code is on GitHub and the work history is on LinkedIn. Email is the fastest way to reach me: bivaasbaral7@gmail.com. I also write here from time to time.