That is not true, to be able to decrypt you just need the *salt* (can be stored) + *password* (must be provided), this will help generate the PBKDF2 key again and also the *IV*.

Is not recommended to store the generated key