Posts: 45
Threads: 14
Joined: Sep 2017
Reputation:
0
Should I create an individual salt for each player, or i can create one myself and use it for every player?
And what's the difference between the two options? And the best way to store a salt?
Posts: 2,528
Threads: 124
Joined: Jul 2009
Reputation:
0
Yes, salt should be per-account - that's the whole purpose of salt! In case someone gets your database, they have to brute-force hashes for each player individially, this really slows them down (does not completely stop them though, offline cracking for a persistent actor with access to botnets of GPU's will break your hashes, unless you use non-gpu optimizable hash algo)
You can store it in plaintext next to password.
