bcrypt is a password-hashing function designed to be slow and resistant to brute force. It uses a configurable cost factor and built-in salt.
This tool runs on the server. Use bcrypt to hash passwords before storing them; never store plain-text passwords.