4 ms·

Brute forcing an individual user's password can still be made an extremely costly operation with appropriate measures incorporated.