Pepper vs. Salt

Difficulty: Advanced

Question

What is a password 'pepper'?

Answer

A secret string added to all passwords before hashing, stored in the application code or environment, NOT in the database like the salt.

Concepts covered

Hashing, Application Secret

JavaScript is required for the interactive version of this page, including the code playground and progress tracking. Browse all InternHack tutorials.