I have read that it is a best practice to store Hashed passwords using Hashing algorithms which uses Salt to protect from Rainbow table attack.

My question is- if i store the hashed password in my Oracle Database table, where does the Salt gets stored?

I will require the same salt used to hash the password, so that i can re-hash the password for user verification. Is my understaning correct?

Browse other questions tagged or ask your own question.