doing 20 rounds in a browser represents a non-trivial amount of work. that's much better than nothing, as it helps defeat existing rainbow tables. iirc, 100

doing 20 rounds in a browser represents a non-trivial amount of work. that's much better than nothing, as it helps defeat existing rainbow tables. iirc, 1000 rounds will take a however as you suggest, on the server side, I would expect them to use a much higher 10k or so round count.