In terms of password protection, what is a 'salt'?

• A. A type of encryption algorithm
• B. A unique value added to passwords before hashing
• C. A form of password recovery
• D. A method of network security

Answer: (B)

A 'salt' in the context of password protection refers to a unique value added to passwords before they undergo hashing. This process enhances security by ensuring that even if two users have the same password, their hashed values will differ due to the unique salt applied to each password. The primary intent of using a salt is to thwart pre-computed attacks like rainbow tables, which can quickly crack hashed passwords if they are identical across different users or systems.

When a password is combined with its specific salt and then hashed, it creates a unique hash that is effectively more secure than hashing the password alone. This adds a layer of complexity and significantly makes it more difficult for attackers to decipher the actual password from the hash, as they would need to know both the password and the respective salt for each user. Consequently, the use of salting is essential in secure password storage and management practices.