title: How should I store a password salt?
body: <p>Using PHP, I am encoding passwords using the hmac function with the sha256 algorithm. What I'm not sure about is how to properly store the salt. </p>
  
  <p>The whole point of hashing a password is in case a hacker gets access to the database. If I store the salt in the db within the same row as the hashed password, isn't it just like I am handing the hacker the "secret code"? I am putting up a door with a lock, and handing the intruder the key.</p>
  
  <p>Can anyone please explain to me how they come about storing their salt?</p>