diff --git a/app/Auth/BcryptPasswordHasher.php b/app/Auth/BcryptPasswordHasher.php
new file mode 100644
index 0000000..8593710
--- /dev/null
+++ b/app/Auth/BcryptPasswordHasher.php
@@ -0,0 +1,16 @@
+<?php
+
+namespace App\Auth;
+
+class BcryptPasswordHasher implements PasswordHasher
+{
+    public function hash(string $plaintext): string
+    {
+        return password_hash($plaintext, PASSWORD_DEFAULT);
+    }
+
+    public function verify(string $plaintext, string $hash): bool
+    {
+        return password_verify($plaintext, $hash);
+    }
+}
diff --git a/app/Auth/PasswordHasher.php b/app/Auth/PasswordHasher.php
new file mode 100644
index 0000000..332d105
--- /dev/null
+++ b/app/Auth/PasswordHasher.php
@@ -0,0 +1,10 @@
+<?php
+
+namespace App\Auth;
+
+interface PasswordHasher
+{
+    public function hash(string $plaintext): string;
+
+    public function verify(string $plaintext, string $hash): bool;
+}
diff --git a/bootstrap/container.php b/bootstrap/container.php
index 4568c66..2ae6e4c 100644
--- a/bootstrap/container.php
+++ b/bootstrap/container.php
@@ -2,8 +2,10 @@
 
 use DI;
 use DI\Container;
+use App\Auth\BcryptPasswordHasher;
 use App\Auth\Clock;
 use App\Auth\JsonSessionRepository;
+use App\Auth\PasswordHasher;
 use App\Auth\RandomTokenGenerator;
 use App\Auth\SessionRepository;
 use App\Auth\SystemClock;
@@ -30,6 +32,7 @@ $container = new Container([
         DI\autowire(JsonSessionRepository::class),
     TokenGenerator::class => DI\autowire(RandomTokenGenerator::class),
     Clock::class => DI\autowire(SystemClock::class),
+    PasswordHasher::class => DI\autowire(BcryptPasswordHasher::class),
 ]);
 
 return $container;