I thought that hashing password with two types of salt (one of them is unique for every user) and two places to storage salts is secure enough.