3 ms·

> plus ensuring mailbox passwords can't be brute-forced (complexity rules If they are supposed to be used by humans then prefer length to complexity.