As someone who often implements their own authentication for backend services, I follow the advice to use scrypt or Argon2. Argon2 is a bit of a PITA though be

As someone who often implements their own authentication for backend services, I follow the advice to use scrypt or Argon2. Argon2 is a bit of a PITA though because it needs to be re-hashed sometimes.