having a salt added to the password reduces the ability to use precomputed hashes (rainbow tables) for attacks, and means that multiple passwords have to be tested individually, not all at once. the standard recommends a salt length of at least 64 bits. the us national institute of standards and technology recommends a salt length of 128 bits.