Why the system stores no passwords
A system stores a slow hash of each password with a per-user salt, rather than the password itself.
What does the salt add, given the hash already hides the password?
A system stores a slow hash of each password with a per-user salt, rather than the password itself.
What does the salt add, given the hash already hides the password?