Glossary: Web App Security and Authentication

Pepper

A secret added to every password before hashing and kept outside the database, so a stolen database alone isn't enough to start guessing.