Peppers
A pepper is a secret held outside the database and mixed into password hashing.
If the database alone is stolen, the attacker is missing something they need, which is a genuine improvement. If they have access to the application as well, they have the pepper too. It helps against one specific scenario, and it is sometimes presented as though it addressed password cracking generally.
Checked against the primary source.
