> I assumed everyone salts their memorised passwords. Like you add something that's a function of the thing you're logging into, in a way that's not atrociously

> I assumed everyone salts their memorised passwords. Like you add something that's a function of the thing you're logging into, in a way that's not atrociously obvious. You're thinking of something other than salting. A salt isn't secret. The point is to make sure that the same password on two services, or on two users of the same service, doesn't have the same hash each time.