Getting password hashes and salts from Drupal 7
The password hashes &amp; salts are stored in the pass column in the users table with the first 4 bytes being settings, the next 8 bytes being the salt, and the remaining the password. See the user_hash_password() &amp;  _password_generate_salt() docs for how salts are generated.