The two most popular packages are bcrypt and scrypt. I personally prefer bcrypt.

I have to raise my pointing finger a little bit. Best password hashing methods consume much memory and much CPU time and are bad at using multiple CPU cores. Because, you know crime people use graphics cards which have a lot of processing power, but a relatively low memory stack (compared to desktop machines with slow CPU and huge RAM) and each graphics processor has hundreds of cores (shader units). The request for no performance impact hashing passwords is equal to asking for no security.

The ideal password hashing algorithm is slow on every old/current/future system. It varies at execution speed (to prevent timing attacks). It doesn't perform better on dedicated hardware or GPU's compared to CPU's. It doesn't fit into a CPU's or CPU's caches (to ensure hashing is expensive).

I wouldn't be too happy to know about a $10 Amazon Cloud machine could or has cracked my PayPal password. I also wouldn't enjoy reading about Bitcoin, or Ethereum miners joined forces and stole all my Amazon payment details after breaking the hashing algorithm. We know botnets have enough brute force power and we all warned better not risking the data of our current or future customers.