You can also explore the --s2k-* options to add a level of difficulty to hashing the password to protect against brute-forcing. E.g. --s2k-mode 3 --s2k-di

You can also explore the --s2k-* options to add a level of difficulty to hashing the password to protect against brute-forcing. E.g. --s2k-mode 3 --s2k-digest-algo sha512 --s2k-count 1000000 Default is to use salt + one round of SHA1, which is relatively weak.