2 ms·

You only get a few tries, there’s no bruteforce

• Retric 5y ago
  There is no way that’s true on a compromised server. The backups need to be recoverable just from the server and a new phone. Your adversaries can just directly copy all data. Picture this: Copy my backup of the server to a new VM, run that, try N passwords, repeat step 1. Of course they can also just modify the software running on the VM.
  • baby 5y ago
    Did you read the whitepaper? The key used to encrypt the backup is not derived from a password