Created: 26.04.2023รฑas—prefijo-o-de-sufijo unlike what others said, it does matter! and as @einstein if you care useย HMAC.

why prefix is bad, because one can calculate the intermediate state of the checksum up to the given fixed salt prefix. then start calculating the rest in parallel. In summaryย phrase+saltย is more secure thanย salt+phrase, butย HMAC(salt, phrase)ย is even better.