This question already has an answer here:
- How to securely hash passwords? 12 answers
I may be wrong here but reading about salt I was wondering whether if we use the same salt for every password saved in our database won't users having same password would lead to same hash even after adding salt, hence diminishing the sole purpose of adding salt.
If it is true should we only use random salt to the databases?
And what should be an optimal salt length?
Could someone also explain how is the salt decided, whether it is a pre agreed data that is added only through the code or is it saved somewhere from where it is accessed again and again for each and every password.