I'm a complete novice at this and in need of advice. I'm building an app that I've implemented a password encrypted backup feature into. I'm wondering about the best practice for handling the salt. With a centralised database I know that it's essential to have a random salt as a defence against hackers, but what about when there is no centralised database for a hacker to attack? Is it acceptable to hard code a salt into my app, or should it be randomly generated and then hardcoded into the outputted encrypted file?
Any advice much appreciated.