Sure it matters. If you don't have a reasonable salt then you're vulnerable to time/space tradeoff attacks like rainbow tables/etc. Also, in case you haven't

Sure it matters. If you don't have a reasonable salt then you're vulnerable to time/space tradeoff attacks like rainbow tables/etc. Also, in case you haven't used it. Scrypt is pretty damn awesome. It's designed to be memory hard, which makes it very hard to crack even with GPUs.