A password-hashing algorithm built to be deliberately slow, so attackers can't cheaply guess passwords by trying millions of combinations. It's a long-standing, trusted choice for safely storing passwords in a database.