Re:Peppering (Password Storage)
by stouset on Thursday July 02, 2020 @12:17PM
(#23714874)
If not stored in the database, it ensures that a database dump alone isn’t enough to recover even a single password. It certainly doesn’t have the level of impact that salting passwords or using a cpu-hard and memory-hard hash does, but it’s certainly something.
Modern password hashes like argon2 include this feature natively.
Modern password hashes like argon2 include this feature natively.