>> It's a chain of hash because that's how passwords were migrated from being stored unsalted, to salted, to scrypted. I kind of figured that, thanks for confi

>> It's a chain of hash because that's how passwords were migrated from being stored unsalted, to salted, to scrypted. I kind of figured that, thanks for confirming :). Personally I wouldn't consider Argon2 yet for production, but only because I'd like to see it run at scale for a few years. PHC or not, I'm hoping it becomes more battle-tested in production use. That said, I'd fully respect any team for using Argon2 and have no personal qualms with it.