title: Password hashing - Industry Standards
body: <p>I know there are probably a lot of questions like this already. But, I really haven't found the definite answer for my question.</p>
  
  <p>I know that passwords are stored in the database with a <strong>prepended random salt</strong> followed by the <strong>hashed</strong> password. The value of the password is actually never known (by the server and thus the server admins).</p>
  
  <p>What is the <strong>standard hashing algorithm</strong>? I know <strong>cryptography</strong> is a dynamic field and changes with time. So I'm asking what's the current industry standard for hashing. </p>
  
  <p>I'm going to be using this for a e-commerce site. So password storage security is actually very important.</p>