Today I learnt that password databases can have pepper, in addition to salt! https://en.wikipedia.org/wiki/Pepper_(cryptography)