title: protect hash code?
body: <p>I'm sure there's something fundamental to all of this that simplifies the whole concept that I'm missing, but here goes:</p>
  
  <p>OK, you salt &amp; hash passwords for security, but what about the code that does it?</p>
  
  <p>If you're on a host or vps, can't "someone" get ahold of your source b/c you compiled it there?  Or, if they can access your database, can't they access the program that does the encryption/decryption and bruteforce it until they get the algorithm?</p>
  
  <p>I know nothing can ever be 100% secure, but how can security be improved in this context?</p>