16 ms·
The FAQ recommends a minimum of 16 chars. Obviously it depends on your threat model.
by mthoms 2y ago
The FAQ recommends a minimum of 16 chars. Obviously it depends on your threat model.
- deleted 2y ago[deleted]
- yoble 2y agoEspecially with 600k PDBKF2 iterations, 16 alphanum chars should be very safe. There's a (warning: very detailed) issue covering the topic of PBKDF2 iterations and password length over here, if you feel like diving into that rabbit hole: https://github.com/robinmoisson/staticrypt/issues/159 https://github.com/robinmoisson/staticrypt/issues/159