I've got a friend who stores some important data locally in a database. Before storing, he however first encrypts it with AES GCM with a certain key. He then encrypts the IV with another key, and then appends it to the encrypted data.
Looking at this, I started wondering, is there an advantage to this? Also, is there a better way to implement security especially when you use 2 passwords anyway?
P.S. My friend is paranoid.