I believe the standard library for bcrypt in ruby also uses salts, it just stores the salt with the hashed password data. Salts will prevent the typical rainbo

I believe the standard library for bcrypt in ruby also uses salts, it just stores the salt with the hashed password data. Salts will prevent the typical rainbow table attack where you have precomputed hashes for a large number of attempts. Salts won't prevent brute force, but bcrypt will make it so that brute force takes too long for a single given user.