See OWASP's recommendations: https://www.owasp.org/index.php/Password_Storage_Cheat_Sheet https://www.owasp.org/index.php/Password_Storage_Cheat_Sheet > Argon2

See OWASP's recommendations: https://www.owasp.org/index.php/Password_Storage_Cheat_Sheet https://www.owasp.org/index.php/Password_Storage_Cheat_Sheet > Argon2[7] is the winner of the password hashing competition and should be considered as your first choice for new applications; > PBKDF2 [4] when FIPS certification or enterprise support on many platforms is required; > scrypt [5] where resisting any/all hardware accelerated attacks is necessary but support isn’t. > bcrypt where PBKDF2 or scrypt support is not available.