How really to store passwords (and API tokens, which are passwords)(medium.com)

https://medium.com/leonard-cyber/how-really-to-store-your-users-passwords-and-api-tokens-which-are-passwords-5132cec8835b