I think this is actually works. Might want a configurable work factor for the kdf. (ns passwords (:require [pandect.core :refer [sha256-hmac]]

I think this is actually works. Might want a configurable work factor for the kdf. (ns passwords (:require [pandect.core :refer [sha256-hmac]] [crypto.password.scrypt :as scrypt] [environ.core :refer [env]])) (def SECRET-KEY (if-let [key (env :secret-key)] key (throw "Set your SECRET_KEY!!!"))) (defn encrypt-password [pass] (-> pass (sha256-hmac SECRET-KEY) scrypt/encrypt)) Edit: update crypto-password code to actually call encrypt.