I keep loosing the bookmark for the NIST guidelines, so here is a link to them:
https://pages.nist.gov/800-63-4/And here is a link directly to section I would most likely need to reference -3.1.1.2. Password Verifiers:
https://pages.nist.gov/800-63-4/sp800-63b.html#passwordver