Hash passwords with bcrypt and verify plain text against bcrypt hashes. Configure the cost factor (work rounds) for tunable security.