Again, I'm not a cryptographer, and PBKDF2 is just an example. I would try to consult someone with a heavier background in the field. I've used PBKDF2 and Scrypt before, Argon2 is the newest, but also therefor least battle-tested.
https://godoc.org/golang.org/x/crypto/pbkdf2
https://godoc.org/golang.org/x/crypto/argon2
https://godoc.org/golang.org/x/crypto/scrypt