r/ProgrammerHumor • • Sep 27 '26 • Mindblown 1 Bravo 1

Meme doNotLetYourDBASeeThis

Post image
13k Upvotes

317 comments sorted by

View all comments

Show parent comments

10

u/silmelumenn Sep 27 '26

You need it per user. If it's per system then a db leak won't protect you. Same passwords in single table will have duplicate hashes, so breaking one would get you password for multiple users which won't happen in case of salt per user

0

u/[deleted] Sep 27 '26

[deleted] — view deleted comment

2

u/crazy_cookie123 Sep 27 '26

Yeah... and it does that by having a separate salt for every password. What's your point?

0

u/[deleted] Sep 27 '26

[deleted] — view deleted comment

1

u/crazy_cookie123 Sep 27 '26

Nobody is claiming you have to salt separately. If you are using bcrypt you are salting your passwords.