&quot;Obsolete&quot; is a <i>very</i> strong word for bcrypt. MD5 is an obsolete hash function and needs to be avoided because it&#x27;s vulnerable to practical attacks. That&#x27;s not the case with bcrypt; rather, in the 15+ years since Mazieres and Provos introduced bcrypt, people have refined the idea.<p>You can throw a dart to pick any of the password hashes, including PBKDF2 (the worst of them), and you&#x27;ll be just fine.