It seems you use too small set of words? I can't see the source on this device, but it looks so.

Secret salt would have to be the same everywhere. So it has no sense to think about it. Just a good hash is needed, hard enough not to be brute forced, like scrypt.