It does not really matter what password hash you choose in 2016. Argon2 is great, and if you have a library for your platform that does it, use it. But if all you have is PBKDF2, please don&#x27;t freak out and come up with some complicated alternative to storing passwords altogether.<p>The real, big risk is not using a password hash at all, and instead using &quot;salted hashes&quot;.