The answer
No. A salt prevents identical passwords from producing the same stored result and can accompany the hash. Keep actual passwords and any optional pepper secret.
How should user passwords be stored in a database?
Does a unique salt have to be kept secret from the password database?
More FAQs in How should user passwords be stored in a database?
Ordinary login does not require recovering a password. Use adaptive hashing for verification and provide a secure reset flow instead of storing a recoverable original value.
Return only the profile fields required by the interface, such as the display name and permitted account details. Exclude password hashes and authentication secrets from responses.
Still have questions?
Browse all our FAQs or reach out to our support team
Want to upskill yourself?
Your learning library
Small steps. Big possibilities.
Find your next course. Build something great.