Most implementations store the salt with the hash itself. Take Django's storage of "password" for example: pbkdf2_sha256$10000$rdfyoPhMNhnC$3QEJ9hp0Qe68/p8

Most implementations store the salt with the hash itself. Take Django's storage of "password" for example: pbkdf2_sha256$10000$rdfyoPhMNhnC$3QEJ9hp0Qe68/p8+b1tVsYmNqVHiFrhmpWizXq+xQoo= Which of course stores it as: algo $ iterations $ salt $ hash Salts simply protect against rainbow tables and force CPU cycles to be re-spent on each password individually. But to answer your question: I'm not sure, but probably.