I'm working on implementing password security and have a question regarding the order of operations when using bcrypt. Some suggest salting and hashing the password first before passing it through bcrypt, while others recommend letting bcrypt handle everything.
Would adding an additional salt before bcrypt provide any real security benefits, or does it interfere with bcrypt’s built-in security mechanisms? Could this approach introduce unnecessary complexity or even weaken the security of the hashing process?