title: Unique Salt per User using Flask-Security
body: <p>After reading here a bit about salting passwords, it seems that it's best to use a unique salt for each user. I'm working on implementing Flask-Security atm, and from the documentation it appears you can only set a global salt: ie SECURITY_PASSWORD_SALT = 'thesalt'</p>
  
  <p>Question: How would one go about making a unique salt for each password? </p>
  
  <p>Thanks!</p>
  
  <p>edit: from the docs on Flask-Security, I found this, which seems to again suggest that this module only uses a single salt for all passwords out of the box. </p>
  
  <pre><code>flask_security.utils.get_hmac(password)
      Returns a Base64 encoded HMAC+SHA512 of the password signed with the salt 
      specified by SECURITY_PASSWORD_SALT.
  </code></pre>