secret added to an input such as a password prior to being hashed with a cryptographic hash function and not stored alongside the hashed output (unlike a salt)