everything flows

There’s a good post at the Errata Security blog (The Importance of Being Canonical) that discusses going behind encrypting passwords in your database, to appending or prepending random characters (“salts”) to your password hashes, effectively neutralizing a common way of cracking encrypted passwords.