This page http://programmers.stackexchange.com/questions/46716/what-sh... suggests that both bcrypt and scrypt can be used (4th bullet under 'Security'). Disclosure: I added the scrypt part alongwith the references which the mods haven't deleted yet (so I am guessing it is ok).

I just went with bcrypt in my project for now because postgresql has it as a built-in function. I couldn't find for scrypt that was readily usable.

Here is a good argument on why scrypt is better: http://it.slashdot.org/comments.pl?sid=1987632&cid=35149... (the second ref link for bcrypt on the above stackexchange page)