Other way around. Salt is different for each user, and generally stored along with each user’s password hash. Pepper is the same for all users, and therefore can be stored separately from the user/PW database (and hopefully more securely), making the user/PW database useless to anyone who doesn’t also get access to the pepper value. See the explainer that [email protected] linked: https://www.baeldung.com/cs/password-salt-pepper
That is a deep cut. Also: you need to pepper it too.
Salt: something static across the whole app
Pepper: something dynamic for each user
Other way around. Salt is different for each user, and generally stored along with each user’s password hash. Pepper is the same for all users, and therefore can be stored separately from the user/PW database (and hopefully more securely), making the user/PW database useless to anyone who doesn’t also get access to the pepper value. See the explainer that [email protected] linked: https://www.baeldung.com/cs/password-salt-pepper