Hello everyone,
In a user table, I store the SHA512 of mySalt||theRealPassword||myPepper
Actually here, mySalt is the username of the user, and myPepper is a static string I chose.
I don't know if taking the username as salt is secure. What could be a better salt ?
How do you determine the salt of a password ?
Thank you ! :)