2 ms·better to put the pw in a physical token than have some short guessable pwby gohrt 12y agobetter to put the pw in a physical token than have some short guessable pw