medium10 pts · first answer countsauthenticationpassword-hashing

What a password pepper adds

Some systems add a secret 'pepper' to passwords before hashing. Where should the pepper be kept, and why?

A.In each user row, next to the saltB.In the frontend code, so it is applied before sendingC.In the password hash column, after the hashD.Outside the database, so a DB leak alone is not enough

Discussion 0

Join free to post in the discussion.

What a password pepper adds

Discussion 0

Related questions