In reply to Chris Hemedinger.

Again completely wrong, scrypt bcrypt PBKDF2 etc are proven algorithms that can be used for password hashing.

SHA256 + a "salt" is wrong, you need a strong random salt in every hash, you need to make your own function that creates the salt etc.
From a security point of view it's always a bad idea to make this / invent this yourself. that's why things like bcrypt exist.