[Jfreegman]

According to the libsodium docs:

>The string produced by crypto_pwhash_str() already includes an algorithm identifier, as well as all the parameters (including the automatically generated salt) that have been used to hash the password.

https://libsodium.gitbook.io/doc/password_hashing/default_ph...

[doomrobo]

Aha, looks like it's using a salt and iterated hashing under the hood. Thanks for the link.