Password hashing

Storing a one-way transform of a password rather than the password itself. bcrypt, argon2, scrypt — never SHA, never MD5.