Yes that is correct.
You don’t have to use a salt, but it is recommended.
The salt is all about stopping dictionary attacks on your password. So a 256 bit password would be more secure than 128 password + 128 bit salt.
Yes that is correct.
You don’t have to use a salt, but it is recommended.
The salt is all about stopping dictionary attacks on your password. So a 256 bit password would be more secure than 128 password + 128 bit salt.