This question already has an answer here:
- bcrypt no need to store salt? 1 answer
I read this related article: Hashed pw storage with random salt which is kind of related to my question, but in the question and in the answers as well they mention to store the random salt used to hash the password in the database.
Now I'm using bcrypt to hash passwords and upon hashing the password I generate a random salt and hash with that BUT I do not store the salt afterwards because bcrypt can verify without it. Is it a good/bad practice? If so, why?