Generate secure keys from passwords using PBKDF2 - the industry standard for password-based key derivation.
PBKDF2 (Password-Based Key Derivation Function 2) is a key derivation function specified in PKCS #5 and updated by RFC 8018, using HMAC with configurable iterations to slow down brute-force attacks and derive secure keys from passwords.
PBKDF2 requires high iteration counts (100,000+) for security. For new systems, consider Argon2id as a more modern alternative.