Table 3 – Requirements, Architecture, and Design
Prevention and Mitigation Practices CWE
That way, theft of the file/database still requires the attacker to try to crack the password.
When handling an incoming password during authentication, take the hash of the