You don't need to crack it, it essentially became your password. You just need to send it to the server.
By the way, any operation performed on the client can be traced. And let me stress that again, a salt is not a super secret thing no one is allowed to know. It's not there to make a single hash harder to crack, it's there to make it harder to crack all other hashes.
Edit: Also, you apply to the salt to the password and then hash it. Hash once, don't use double hashes or anything weird. That's just decremental to security.
Last edited by JustSid; 06/05/14 14:08.