Password storage comes with a long checklist: a memory-hard algorithm, sensible costs, fresh salts, a format that survives parameter changes, a migration path. In nurago, the passwordhash package wraps the checklist into three method pairs (hash, verify, rehash), with RFC 9106 defaults from a bare New() and self-describing hashes, so raising the cost later is an if-statement at login rather than a migration project. https://tecnick.com/articles/nurago-passwordhash/ #golang #security