How are user passwords stored?

This article discusses the method used when users are stored in Halo.

When users are stored in the Halo database their passwords are stored hashed.

Halo uses the Pbkdf2 key derivation function with a suitably high iteration count, to hash the password for storage in the database.

Each password has its own salt applied prior to the hashing to prevent rainbow table attacks.