You can use bcrypt package for go passwords. It also has a cost parameter to harden the hashing algorithm.