Pbkdf2 is designed to protect the users from their own bad choices more than anything else. In fact if you think about it, pbkdf2 with a high number of iterati

Pbkdf2 is designed to protect the users from their own bad choices more than anything else. In fact if you think about it, pbkdf2 with a high number of iterations could become quite costly at scale. How much are you willing to pay to protect a given user from themselves? If someone uses a proper password, one iteration is all you need.