A modern password-hashing algorithm widely considered today's gold standard. Like bcrypt it's slow on purpose, but it also eats up memory, which makes brute-force guessing even harder.