Comment by wonderercat

You could still use bcrypt and do the comparison work server-side.

Depending on work factors and whatnot, it's now a backend load balancing issue. But it's probably solvable.