Also, if you're using Django, consider Playdoh: https://github.com/mozilla/playdoh https://github.com/mozilla/playdoh It's what we use at Mozilla as the basis

Also, if you're using Django, consider Playdoh: https://github.com/mozilla/playdoh https://github.com/mozilla/playdoh It's what we use at Mozilla as the basis for most of our Django-based stuff, and gets you bcrypt password hashing -- even on older Django releases -- for free, along with some other niceties that probably need to find their way upstream soon :)