DevOps & Tooling / Knowledge library
Password Salting
Adds a unique random value before password hashing
Why learn Password Salting?
It prevents identical passwords from sharing stored hashes and defeats shared precomputation
The problem it solves
It makes offline cracking work specific to each credential record
Where it came from
Password Salting is a security concept that adds a unique random value before password hashing. Its guarantees and tradeoffs depend on the concrete implementation and operating context.
Build your understanding
Work through these exercises in order. Try the task before opening a reference.
- Define Password Salting and distinguish it from a neighboring concept.
- Choose a realistic task where Password Salting is appropriate.
- Identify a failure mode caused by misusing Password Salting.
- Interpret a small design or result involving Password Salting.
- Explain one tradeoff or limitation of Password Salting.
Documentation and sources
- OWASP Developer Guide: Security Principles (devguide.owasp.org)