{"id":2918,"date":"2022-05-18T15:08:00","date_gmt":"2022-05-18T15:08:00","guid":{"rendered":"https:\/\/sectigostore.com\/blog\/?p=2918"},"modified":"2022-04-20T15:31:30","modified_gmt":"2022-04-20T15:31:30","slug":"why-using-a-password-salt-and-hash-makes-for-better-security","status":"publish","type":"post","link":"https:\/\/sectigostore.com\/blog\/why-using-a-password-salt-and-hash-makes-for-better-security\/","title":{"rendered":"Why Using a Password Salt and Hash Makes for Better Security"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">The <a href=\"https:\/\/www.imperva.com\/blog\/bad-bot-report-2021-the-pandemic-of-the-internet\/\">Imperva Bad Bot Report 2021<\/a> revealed that 34% of all login attempts are malicious bots attempting account takeover attacks (ATOs). Password salting and hashing can help you secure your employees\u2019 and customers\u2019 passwords to keep them out of the hands of cybercriminals \u2014 here\u2019s how<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Verizon\u2019s <a href=\"https:\/\/www.verizon.com\/business\/resources\/reports\/dbir\/\">2021 Data Breach Investigation Report<\/a> states that credentials were the most sought-after data type in data breaches, comprising nearly 60% of compromised data. So, as a business owner, it\u2019s vital that you take all possible steps to ensure that the passwords used by your employees and customers are secure. You can make the cybercriminals\u2019 job more difficult by hashing and salting all passwords prior to saving credential-related info to your server. But what does using a password salt and hash combination have to do with password security? Let\u2019s take a look.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Why You Need a Password Salt and Hash for Stronger Account Security<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Storing your plaintext passwords in a database somewhere is one of the biggest mistakes your organization can make when it comes to password security. Storing passwords in plain text is like storing your company\u2019s intellectual property in an unlocked file cabinet; anyone who knows where to look can find it without much effort.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So, what can you do to make them more secure? The <a href=\"https:\/\/pages.nist.gov\/800-63-3\/sp800-63b.html\">National Institute of Standards and Technology (NIST)<\/a> says you should secure your passwords (i.e., memorized secrets) is to salt and hash them (more on each of those terms momentarily). Why?<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Plaintext passwords are insecure secrets; if someone gains access to that database, it\u2019ll spell disaster for your organization and users.<\/li><li>Adding a salt to your passwords prior to hashing them makes them more resistant to brute force, dictionary attacks and rainbow table attacks. (More on that in a moment.)<\/li><li>Trying to brute force salted password hashes it too cumbersome, resource-exhaustive, and costly for hackers.<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">As you\u2019ll soon learn, when we talk about \u201cpassword salt and hash,\u201d we\u2019re referring to the combination of the two methods \u2014 salting and hashing. Passwords are first salted to add a unique element to each password, then each password-salt combination gets converted into a character string of a fixed length (thanks to the use of the hashing function). The resulting value is a unique password hash, so it can\u2019t be used in most credential-focused attacks. Let\u2019s apply salt and hash to our example password:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"894\" height=\"337\" src=\"https:\/\/sectigostore.com\/blog\/wp-content\/uploads\/2022\/04\/password-hash-and-salt2.png\" alt=\"Password salt and hash graphic: A basic illustration of password salting and hashing process, showing the progression from a plaintext password input to the salted password hash digest output\" class=\"wp-image-2929\" srcset=\"https:\/\/sectigostore.com\/blog\/wp-content\/uploads\/2022\/04\/password-hash-and-salt2.png 894w, https:\/\/sectigostore.com\/blog\/wp-content\/uploads\/2022\/04\/password-hash-and-salt2-300x113.png 300w, https:\/\/sectigostore.com\/blog\/wp-content\/uploads\/2022\/04\/password-hash-and-salt2-560x211.png 560w\" sizes=\"auto, (max-width: 894px) 100vw, 894px\" \/><figcaption>An example of applying a password salt and hash to generate a password hash using the Argon2id hashing algorithm.<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">But to really understand the importance of salting and hashing, let\u2019s explore each of these concepts individually.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What Is Password Salting?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Password salting means adding a random value to a password prior to hashing to enhance its strength. What this does is ensure that password hashes for two separate users aren\u2019t the same, even if they\u2019re using the same passwords as the original inputs. Typically, salts are stored along with the password hashes in the password database.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Password salting is very much like seasoning your French fries. Fries are yummy on their own, but adding salt makes them even tastier. Likewise, adding a salt to your password enhances the security of this secret.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Salting makes it much more difficult for criminals to carry out the following attacks:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/nordpass.com\/blog\/what-is-a-dictionary-attack\/\"><strong>Dictionary attacks<\/strong><\/a>\u2014an attack where the criminals try all the words in their dictionary to attempt to crack a password.<\/li><li><strong>Database lookup attacks <\/strong>\u2014 where criminals send SQL query statements to the website database to trick it into coughing up valuable information.<\/li><li><a href=\"https:\/\/nordpass.com\/blog\/brute-force-attack\/\"><strong>Brute force attacks<\/strong><\/a>\u2014criminals use trial and error to try password-username combinations until they find the correct one for an account.<\/li><li><a href=\"https:\/\/owasp.org\/www-community\/attacks\/Credential_stuffing\"><strong>Credential stuffing attacks<\/strong><\/a>\u2014 previously leaked or breached passwords are compiled in databases and used in subsequent attacks.<\/li><li><a href=\"https:\/\/www.thesslstore.com\/blog\/rainbow-tables-a-path-to-password-gold-for-cybercriminals\/\"><strong>Rainbow table attacks<\/strong><\/a> \u2014 these attacks rely on massive tables of passwords and hashes that can allow an attacker to look up password hashes quickly.<\/li><\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">How Salting Makes Password Hashes More Secure<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">When you typically hash a password (without salt), it results in the creation of a hash value. But what happens when two people use the same password? If you apply a hash function to two identical passwords, you\u2019ll wind up with two identical password hash values. This is bad news because if one of those users\u2019 passwords becomes compromised, then an attacker can figure out their corresponding hash values and use them to create tables. To avoid this, you\u2019ll add a salt.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When the password is salted, one or more random integers is added to the password. The characters used in the salt are unique for each password input \u2014 so, even if two users have the same password, once a salt is added, their resulting password hashes will be completely different.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Let\u2019s look at an example of a salted password:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"960\" height=\"311\" src=\"https:\/\/sectigostore.com\/blog\/wp-content\/uploads\/2022\/04\/password-salting-example2.png\" alt=\"Password salt and hash graphic: A basic illustration of the password salting process, showing the progression from a plaintext password input to the password + salt combination\" class=\"wp-image-2931\" srcset=\"https:\/\/sectigostore.com\/blog\/wp-content\/uploads\/2022\/04\/password-salting-example2.png 960w, https:\/\/sectigostore.com\/blog\/wp-content\/uploads\/2022\/04\/password-salting-example2-300x97.png 300w, https:\/\/sectigostore.com\/blog\/wp-content\/uploads\/2022\/04\/password-salting-example2-560x181.png 560w, https:\/\/sectigostore.com\/blog\/wp-content\/uploads\/2022\/04\/password-salting-example2-940x305.png 940w\" sizes=\"auto, (max-width: 960px) 100vw, 960px\" \/><figcaption>An example of adding a salt to a password, creating the password salt and hash combination seen above.<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Let\u2019s say your password is \u2018h@ckPr00f.\u2019 Once you add the salt to it, a unique password hash is created that is different from hashes for identical passwords. This means you wouldn\u2019t recognize it after adding salt to it and neither would a criminal.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is one part of the \u201cpassword salt and hash\u201d thing we mentioned earlier. Let\u2019s explore the second part of that concept. &nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What Is Password Hashing?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The second part of password salt and hash is, of course, the hash. Hashing converts your plaintext password into a fixed-length, unique string of hexadecimal characters that\u2019s totally different from the original text. Hashing is known as a one-way function because a hash value can\u2019t be converted back to the original text; the process is essentially irreversible (because it would take way too much time and resources to conceivably do so). After hashing, the password hash is stored in the site database.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So, what does a hash look like?<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"948\" height=\"306\" src=\"https:\/\/sectigostore.com\/blog\/wp-content\/uploads\/2022\/04\/password-hashing-example2.png\" alt=\"Password salt and hash graphic: A basic illustration of the password hashing process, showing the progression from a plaintext password input to the password hash digest output\" class=\"wp-image-2932\" srcset=\"https:\/\/sectigostore.com\/blog\/wp-content\/uploads\/2022\/04\/password-hashing-example2.png 948w, https:\/\/sectigostore.com\/blog\/wp-content\/uploads\/2022\/04\/password-hashing-example2-300x97.png 300w, https:\/\/sectigostore.com\/blog\/wp-content\/uploads\/2022\/04\/password-hashing-example2-560x181.png 560w, https:\/\/sectigostore.com\/blog\/wp-content\/uploads\/2022\/04\/password-hashing-example2-940x303.png 940w\" sizes=\"auto, (max-width: 948px) 100vw, 948px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">These days, some hashing algorithms are available to automatically salt passwords so we don\u2019t need to do it ourselves. Available tools include:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/github.com\/alexedwards\/argon2id\">Argon2id<\/a><\/li><li><a href=\"https:\/\/github.com\/bcrypt-ruby\/bcrypt-ruby\">Bcrypt<\/a><\/li><li><a href=\"https:\/\/github.com\/crypto-browserify\/pbkdf2\">PBKDF2<\/a> (password-based key derivation function 2)<\/li><li>Sscript<\/li><\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">A Word About Peppering<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">If you want to go the extra mile to protect your stored passwords, then think about those French fries again. What can you do to make your fries more mouthwatering? Well, you could add pepper. Well, in cryptography, peppering is also a concept that applies to password hashing.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The <a href=\"https:\/\/tools.ietf.org\/id\/draft-whited-kitten-password-storage-00.html\">Internet Engineering Task Force<\/a> (IETF) describes peppering as \u201ca secret added to a password hash like a salt. Unlike a salt, peppers are secret, not unique, and are not stored alongside the hashed password.\u201d They should be stored in a separate location from the salts, such as in a hardware security module (HSM). Isolating the pepper helps to ensure that the bad guys can\u2019t access the hashes, even if they use <a href=\"https:\/\/sectigostore.com\/blog\/what-is-sql-injection-8-tips-on-how-to-prevent-sql-injection-attacks\/\">SQL injection techniques<\/a> to exploit vulnerabilities in the database.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The IETF document also states that for the PBKDF2 key derivation function, the minimum pepper length should be 32 bytes.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Final Words on Why a Password Salt and Hash Make for Better Security<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Password security doesn\u2019t end with users simply creating and using strong passwords; as an admin, you have to protect their stored passwords. If cybercriminals get hold of your users\u2019 stored passwords, they can use them to easily penetrate their accounts, networks, or cause a litany of other issues for your organization and users. This is why it\u2019s crucial to only store salted password hashes.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The answer is to incorporate both a password salt and hash into your password security and storage processes and policies. Together, salting and hashing make it much more difficult for criminals to access your users\u2019 passwords, making for better security.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Imperva Bad Bot Report 2021 revealed that 34% of all login attempts are malicious bots attempting account takeover attacks (ATOs). Password salting and hashing can help you secure your&#8230;<\/p>\n","protected":false},"author":19,"featured_media":2934,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","tve_updated_post":"","tve_custom_css":"","tve_user_custom_css":"","tve_globals":{},"tcb2_ready":0,"tcb_editor_enabled":0,"tve_landing_page":"","_tve_header":"","_tve_footer":""},"categories":[13],"tags":[247,245,246],"class_list":["post-2918","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cyber-security","tag-password-hashing","tag-password-security","tag-salt","post-with-tags"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.0 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Why Using a Password Salt and Hash Makes for Better Security - InfoSec Insights<\/title>\n<meta name=\"description\" content=\"A password salt and hash should be integral components of your storage procedures. Only store password hashes, never the passwords themselves.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/sectigostore.com\/blog\/why-using-a-password-salt-and-hash-makes-for-better-security\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Why Using a Password Salt and Hash Makes for Better Security - InfoSec Insights\" \/>\n<meta property=\"og:description\" content=\"A password salt and hash should be integral components of your storage procedures. Only store password hashes, never the passwords themselves.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/sectigostore.com\/blog\/why-using-a-password-salt-and-hash-makes-for-better-security\/\" \/>\n<meta property=\"og:site_name\" content=\"InfoSec Insights\" \/>\n<meta property=\"article:published_time\" content=\"2022-05-18T15:08:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/sectigostore.com\/blog\/wp-content\/uploads\/2022\/04\/password-salt-and-hash-feature.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1600\" \/>\n\t<meta property=\"og:image:height\" content=\"1000\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Megha Thakkar\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Megha Thakkar\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/sectigostore.com\\\/blog\\\/why-using-a-password-salt-and-hash-makes-for-better-security\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/sectigostore.com\\\/blog\\\/why-using-a-password-salt-and-hash-makes-for-better-security\\\/\"},\"author\":{\"name\":\"Megha Thakkar\",\"@id\":\"https:\\\/\\\/sectigostore.com\\\/blog\\\/#\\\/schema\\\/person\\\/77f01ec498571464bae513fa5bfd42da\"},\"headline\":\"Why Using a Password Salt and Hash Makes for Better Security\",\"datePublished\":\"2022-05-18T15:08:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/sectigostore.com\\\/blog\\\/why-using-a-password-salt-and-hash-makes-for-better-security\\\/\"},\"wordCount\":1301,\"image\":{\"@id\":\"https:\\\/\\\/sectigostore.com\\\/blog\\\/why-using-a-password-salt-and-hash-makes-for-better-security\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/sectigostore.com\\\/blog\\\/wp-content\\\/uploads\\\/2022\\\/04\\\/password-salt-and-hash-feature.jpg\",\"keywords\":[\"password hashing\",\"password security\",\"salt\"],\"articleSection\":[\"Cyber Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/sectigostore.com\\\/blog\\\/why-using-a-password-salt-and-hash-makes-for-better-security\\\/\",\"url\":\"https:\\\/\\\/sectigostore.com\\\/blog\\\/why-using-a-password-salt-and-hash-makes-for-better-security\\\/\",\"name\":\"Why Using a Password Salt and Hash Makes for Better Security - InfoSec Insights\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/sectigostore.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/sectigostore.com\\\/blog\\\/why-using-a-password-salt-and-hash-makes-for-better-security\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/sectigostore.com\\\/blog\\\/why-using-a-password-salt-and-hash-makes-for-better-security\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/sectigostore.com\\\/blog\\\/wp-content\\\/uploads\\\/2022\\\/04\\\/password-salt-and-hash-feature.jpg\",\"datePublished\":\"2022-05-18T15:08:00+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/sectigostore.com\\\/blog\\\/#\\\/schema\\\/person\\\/77f01ec498571464bae513fa5bfd42da\"},\"description\":\"A password salt and hash should be integral components of your storage procedures. Only store password hashes, never the passwords themselves.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/sectigostore.com\\\/blog\\\/why-using-a-password-salt-and-hash-makes-for-better-security\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/sectigostore.com\\\/blog\\\/why-using-a-password-salt-and-hash-makes-for-better-security\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/sectigostore.com\\\/blog\\\/why-using-a-password-salt-and-hash-makes-for-better-security\\\/#primaryimage\",\"url\":\"https:\\\/\\\/sectigostore.com\\\/blog\\\/wp-content\\\/uploads\\\/2022\\\/04\\\/password-salt-and-hash-feature.jpg\",\"contentUrl\":\"https:\\\/\\\/sectigostore.com\\\/blog\\\/wp-content\\\/uploads\\\/2022\\\/04\\\/password-salt-and-hash-feature.jpg\",\"width\":1600,\"height\":1000},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/sectigostore.com\\\/blog\\\/why-using-a-password-salt-and-hash-makes-for-better-security\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/sectigostore.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Why Using a Password Salt and Hash Makes for Better Security\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/sectigostore.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/sectigostore.com\\\/blog\\\/\",\"name\":\"InfoSec Insights\",\"description\":\"SectigoStore.com Blog\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/sectigostore.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/sectigostore.com\\\/blog\\\/#\\\/schema\\\/person\\\/77f01ec498571464bae513fa5bfd42da\",\"name\":\"Megha Thakkar\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/390ac6e8c0915150ea845acfc11db159571a2dc74d5745edc8edacec9f996bce?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/390ac6e8c0915150ea845acfc11db159571a2dc74d5745edc8edacec9f996bce?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/390ac6e8c0915150ea845acfc11db159571a2dc74d5745edc8edacec9f996bce?s=96&d=mm&r=g\",\"caption\":\"Megha Thakkar\"},\"description\":\"Megha can usually be found reading, writing, or watching documentaries, guaranteed to bore her family. She is a techno-freak with interests ranging from cooking to travel. A regular contributor to various web security blogs, she has earned her diploma in network-centric computing. Being a mother has taught her to speak less and write more (coz who listens to moms, right?).\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Why Using a Password Salt and Hash Makes for Better Security - InfoSec Insights","description":"A password salt and hash should be integral components of your storage procedures. Only store password hashes, never the passwords themselves.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/sectigostore.com\/blog\/why-using-a-password-salt-and-hash-makes-for-better-security\/","og_locale":"en_US","og_type":"article","og_title":"Why Using a Password Salt and Hash Makes for Better Security - InfoSec Insights","og_description":"A password salt and hash should be integral components of your storage procedures. Only store password hashes, never the passwords themselves.","og_url":"https:\/\/sectigostore.com\/blog\/why-using-a-password-salt-and-hash-makes-for-better-security\/","og_site_name":"InfoSec Insights","article_published_time":"2022-05-18T15:08:00+00:00","og_image":[{"width":1600,"height":1000,"url":"https:\/\/sectigostore.com\/blog\/wp-content\/uploads\/2022\/04\/password-salt-and-hash-feature.jpg","type":"image\/jpeg"}],"author":"Megha Thakkar","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Megha Thakkar","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/sectigostore.com\/blog\/why-using-a-password-salt-and-hash-makes-for-better-security\/#article","isPartOf":{"@id":"https:\/\/sectigostore.com\/blog\/why-using-a-password-salt-and-hash-makes-for-better-security\/"},"author":{"name":"Megha Thakkar","@id":"https:\/\/sectigostore.com\/blog\/#\/schema\/person\/77f01ec498571464bae513fa5bfd42da"},"headline":"Why Using a Password Salt and Hash Makes for Better Security","datePublished":"2022-05-18T15:08:00+00:00","mainEntityOfPage":{"@id":"https:\/\/sectigostore.com\/blog\/why-using-a-password-salt-and-hash-makes-for-better-security\/"},"wordCount":1301,"image":{"@id":"https:\/\/sectigostore.com\/blog\/why-using-a-password-salt-and-hash-makes-for-better-security\/#primaryimage"},"thumbnailUrl":"https:\/\/sectigostore.com\/blog\/wp-content\/uploads\/2022\/04\/password-salt-and-hash-feature.jpg","keywords":["password hashing","password security","salt"],"articleSection":["Cyber Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/sectigostore.com\/blog\/why-using-a-password-salt-and-hash-makes-for-better-security\/","url":"https:\/\/sectigostore.com\/blog\/why-using-a-password-salt-and-hash-makes-for-better-security\/","name":"Why Using a Password Salt and Hash Makes for Better Security - InfoSec Insights","isPartOf":{"@id":"https:\/\/sectigostore.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/sectigostore.com\/blog\/why-using-a-password-salt-and-hash-makes-for-better-security\/#primaryimage"},"image":{"@id":"https:\/\/sectigostore.com\/blog\/why-using-a-password-salt-and-hash-makes-for-better-security\/#primaryimage"},"thumbnailUrl":"https:\/\/sectigostore.com\/blog\/wp-content\/uploads\/2022\/04\/password-salt-and-hash-feature.jpg","datePublished":"2022-05-18T15:08:00+00:00","author":{"@id":"https:\/\/sectigostore.com\/blog\/#\/schema\/person\/77f01ec498571464bae513fa5bfd42da"},"description":"A password salt and hash should be integral components of your storage procedures. Only store password hashes, never the passwords themselves.","breadcrumb":{"@id":"https:\/\/sectigostore.com\/blog\/why-using-a-password-salt-and-hash-makes-for-better-security\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/sectigostore.com\/blog\/why-using-a-password-salt-and-hash-makes-for-better-security\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/sectigostore.com\/blog\/why-using-a-password-salt-and-hash-makes-for-better-security\/#primaryimage","url":"https:\/\/sectigostore.com\/blog\/wp-content\/uploads\/2022\/04\/password-salt-and-hash-feature.jpg","contentUrl":"https:\/\/sectigostore.com\/blog\/wp-content\/uploads\/2022\/04\/password-salt-and-hash-feature.jpg","width":1600,"height":1000},{"@type":"BreadcrumbList","@id":"https:\/\/sectigostore.com\/blog\/why-using-a-password-salt-and-hash-makes-for-better-security\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/sectigostore.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Why Using a Password Salt and Hash Makes for Better Security"}]},{"@type":"WebSite","@id":"https:\/\/sectigostore.com\/blog\/#website","url":"https:\/\/sectigostore.com\/blog\/","name":"InfoSec Insights","description":"SectigoStore.com Blog","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/sectigostore.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/sectigostore.com\/blog\/#\/schema\/person\/77f01ec498571464bae513fa5bfd42da","name":"Megha Thakkar","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/390ac6e8c0915150ea845acfc11db159571a2dc74d5745edc8edacec9f996bce?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/390ac6e8c0915150ea845acfc11db159571a2dc74d5745edc8edacec9f996bce?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/390ac6e8c0915150ea845acfc11db159571a2dc74d5745edc8edacec9f996bce?s=96&d=mm&r=g","caption":"Megha Thakkar"},"description":"Megha can usually be found reading, writing, or watching documentaries, guaranteed to bore her family. She is a techno-freak with interests ranging from cooking to travel. A regular contributor to various web security blogs, she has earned her diploma in network-centric computing. Being a mother has taught her to speak less and write more (coz who listens to moms, right?)."}]}},"_links":{"self":[{"href":"https:\/\/sectigostore.com\/blog\/wp-json\/wp\/v2\/posts\/2918","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sectigostore.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sectigostore.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sectigostore.com\/blog\/wp-json\/wp\/v2\/users\/19"}],"replies":[{"embeddable":true,"href":"https:\/\/sectigostore.com\/blog\/wp-json\/wp\/v2\/comments?post=2918"}],"version-history":[{"count":0,"href":"https:\/\/sectigostore.com\/blog\/wp-json\/wp\/v2\/posts\/2918\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sectigostore.com\/blog\/wp-json\/wp\/v2\/media\/2934"}],"wp:attachment":[{"href":"https:\/\/sectigostore.com\/blog\/wp-json\/wp\/v2\/media?parent=2918"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sectigostore.com\/blog\/wp-json\/wp\/v2\/categories?post=2918"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sectigostore.com\/blog\/wp-json\/wp\/v2\/tags?post=2918"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}