The default hashing algorithm is bcrypt

But checking passwords are backwards compatible with sha256, unless
"bcrypt" is set as the hashing algorithm (as oppsed to "bcrypt+").