In my recent security travels, I found an article by the author of bcrypt-ruby on How To Safely Store A Password.

codahale.com/how-to-sa…

It was last updated in 2011 but I think it holds up well.