And always perform hash verification or decrypting client-side so you can prevent brute-force attacks (purposely slowing down the hash verification or decryptin

And always perform hash verification or decrypting client-side so you can prevent brute-force attacks (purposely slowing down the hash verification or decrypting to 100ms is okayish already).