Everyone will tell you that the best practice for password storage is [sb]crypt with random salt. Ok, we got that and even maybe got everyone to agree. But let me bump that up a notch: do you know what pepper is?
The concept of peppering is simple: add a extra, fixed, hardcoded salt. (On top of what you are already doing, obviously.)
That is, do something like:
salt = urandom(16)
pepper = "oFMLjbFr2Bb3XR)aKKst@kBF}tHD9q" # or, getenv('PEPPER')
hashed_password = scrypt(password, salt + pepper)
store(hashed_password, salt)
Does this seem useless? Well if you think about it, most password leaks happen because of database leaks (SQL injection, DB credential compromise, DB auth bypass...) and attackers might not necessarily get access to the webserver. In that case, the hashes would be completely useless.
Yes, this is not sureproof, attackers might also get access to your webserver, but security is all about layers and raising cost, no? Who knows, maybe the eBay leaked hashes would have been useless to the attackers were they peppered.
Edited to add: a note on rotation
If you have a database of hashes already you can use a slightly different design:
scrypt(scrypt(password, salt), pepper)
And update your existing hashes with:
scrypt(old_hash, pepper)
If your old pepper gets compromised you can do the same, with two layers of pepper - old and new. If you feel bad about this, go look up how Facebook does password hashing: with half a dozen layers, they call it "The Onion" :)
Just FYI, I'm @FiloSottile on Twitter.