Password Hash : slower is better

Edit: another good post on passwords, mentioning bcrypt

Notes