If modern hash algorithms use salts, how are hashed passwords compared to check a correct result?

Question

I’ve used hashing algorithms back in my PHP days using bcrypt, which has a function to compare an entered password on the login form, to the hash stored in the database, but if the salt is random each time, how can the hash be checked?

In: Technology

Answer 1

The salt is random, but static. It is created when the entry is created in the hash table and stored alongside the hash.

When you enter your password, it is hashed along with the stored salt and then compared to the hash entry in the table.