In order to make passwords more secure , a random salt is added to the password before harshing occurs .
I am assuming the salt is stored on the server in an associative array [username:salt] and the server appends the salt to the password before harshing everytime the user logins else the server wouldnt know what random salt to append to the password
1) Is my assumption correct ???
2) Is the salt normally stored in plain text or cipher on the server and why ??
3) Which file is it stored in ?? ( i know this may be subjective as it depends on the different servers)
I would like a detailed explaination if possible