PBKDF2-HMAC-SHA256

A password-based key derivation function that deliberately slows computation by applying many HMAC-SHA256 iterations to a password and random salt, raising the cost of offline brute-force attacks. The system stores only the derived result rather than the plaintext password.