Site Glossary

A secret value added to password hashing in addition to a salt. Unlike salts, peppers must be protected (often in an HSM or secure configuration store). Peppers can reduce the value of stolen password hashes if the pepper remains secret.