As someone who often implements their own authentication for backend services, I follow the advice to use scrypt or Argon2.

Argon2 is a bit of a PITA though because it needs to be re-hashed sometimes.