• caglararli@hotmail.com
  • 05386281520

Question about storing salt values and hashed passwords in the database [duplicate]

Çağlar Arlı      -    44 Views

Question about storing salt values and hashed passwords in the database [duplicate]

So I was reading through an article about how passwords are salted and hashed through a cryptographic function here, and found out that hashed passwords, along with the plaintext salt values are stored in the database.

Now, I was wondering: if both the hashed passwords and salt values are stored in the database, if hackers can access the database and therefore, access the salt value used to generate the hash for the password, wouldn't it make the salt completely pointless anyway as hackers would already know that they simply have to add the salt value at the end of the password and guess the password as normal?