In the past I've used https://pythonhosted.org/Flask-Security/ for Python Flask password management (with bcrypt) and it fit my use case.