What the article tries to say is, that your password hashing function needs three attributes: * it has to be dog slow (to make brute forcing hard) * it should

What the article tries to say is, that your password hashing function needs three attributes: * it has to be dog slow (to make brute forcing hard) * it should be complicated enough to avoid collisions (this really applies to most hash functions) * it should be suitably salted, to avoid rainbow tables -> bcrypt is designed like this, if in doubt, use it