Tuesday 27 October 2026 11:22:11 GMT+01:00

Netcrook

HomeManifesto
News
Techcrook
Geocrook
WikicrookTeamAppContact
EnglishItaliano

WIKICROOK

Salted hashing

A password storage method that adds random data before hashing to slow cracking.

Salted hashing is a password storage technique that adds a random value, called a salt, to each password before hashing it. The salt is usually stored with the hash, but it is unique per account, so the same password will not produce the same result across users. This matters because it blocks precomputed cracking methods such as rainbow tables and makes bulk attacks far less efficient.

In a breach, attackers may still try offline cracking if they steal hashed passwords. With salts, they must crack each hash separately, which raises the cost and time needed to recover weak passwords. Good defenses pair salted hashing with a slow password algorithm and a strong work factor, so guessing millions of passwords becomes expensive. In real systems, salted hashing helps reduce the damage of database leaks, but it does not replace multi-factor authentication or the need to reject reused and compromised passwords.

← WIKICROOK index