This is correct. Salt just defeats rainbow tables. They could still be pre-generated for high-value usernames, though. Some say that this is most useful in giv

This is correct. Salt just defeats rainbow tables. They could still be pre-generated for high-value usernames, though. Some say that this is most useful in giving the company a more sizeable window in which to react (e.g. force password changes).