Skip to content

Why the system stores no passwords

A system stores a slow hash of each password with a per-user salt, rather than the password itself.

What does the salt add, given the hash already hides the password?