In the context of web authentication, a typically refers to a cryptographic secret used to sign or encrypt data. While salts are used primarily for storing passwords (at rest), keys are often used for maintaining user sessions (in transit or active memory).
While bcrypt is excellent, the current gold standard for password hashing is (winner of the Password Hashing Competition in 2015). authentication unique keys and salts