I have read at a lot of places that it isn't a good practice to use MD5. Should I use a Salt or should i use bcrypt?
Also, if I need to use bcrypt, how do I do it?
Since you're using Code Igniter, that means PHP -- bcrypt forces you to use a salt, plus its a slower hashing method which means the passwords are much more secure should your database ever be compromised.
Final not its not "bcrypt or salt" its "bcrypt and salt" -- a salt is a string you add to the plaintext password before hashing, to prevent the use of rainbow tables for an attacker.
Will be using bcrypt :)
http://stackoverflow.com/questions/7044785/what-is-the-safes...