How to implement hash salting?

Question

Data protection

I don't understand the hash salt thing. If the salt is dynamic, then let's say salted the hash, added it to the database. Then, for example, the user wants to log in: he enters the password and you need to take the hash with the salt again, but the salt is random and this time it will be different, therefore, the hash will come out different, which means it will not match the hash from the database ... And if the salt is static, then it can steal and hack everything. Well, or where to store it then so as not to be stolen?

Answer 1

As a first approximation, they are salted so that it is impossible to pre-calculate a large set of hash values ​​for the list of the most popular passwords, and then massively check it against the database. Therefore, the salt can be stored next to the hash value, it is important that it be different for each hash.

Answer 2

Store the salt next to the hash: an article .