Yes to scrypt, but these days, Argon2[1] is the best. "better" means "cannot be calculated much faster on GPU or even FPGA because it requires a lot of RAM".

Yes to scrypt, but these days, Argon2[1] is the best. "better" means "cannot be calculated much faster on GPU or even FPGA because it requires a lot of RAM". "materially better" probably means "less than a million of hashes per second on eight Nvidia GTX 1080 running hashcat"[2], so Django and scrypt are both good (adjust work factor as needed, of course). 1 - https://en.wikipedia.org/wiki/Argon2 https://en.wikipedia.org/wiki/Argon2 2 - https://gist.github.com/epixoip/a83d38f412b4737e99bbef804a270c40 https://gist.github.com/epixoip/a83d38f412b4737e99bbef804a27...