bcrypt with backwards compatibility is the default