4 ms·
i've always stored the salt plain text, how else do you store a salt? i need to be able to use it with 0 information about the user other than "they are trying
by flatiron 7y ago
i've always stored the salt plain text, how else do you store a salt? i need to be able to use it with 0 information about the user other than "they are trying to use this password"
- txcwpalpha 7y agoI've seen lots of people under the false impression that salts need to be kept secret, and jump through some hoops to do stuff like encrypt salts before storing them. Well intentioned, but misinformed and error prone, and likely indicates that they're not using standard login/password hash libraries and might be doing other things wrong, too.