I plan to use it locally on mobile devices. These seems to do not offer computational power as good as on a server.

So what could be a secure argon2id parameters that run around 1s since offline apps should also be friendly too?

  • 2
    $\begingroup$ Similar question. There are standard recommandations there in RFC 9106 $\endgroup$
    – fgrieu
    Commented Aug 12, 2022 at 12:59
  • 2
    $\begingroup$ 3 iterations and 64 MiB of memory is a decent lower bound. That takes 0.07 seconds on my desktop using libsodium though, which is literally nothing. I wouldn't go below 3 iterations, and you likely can't use much more memory than that on mobile devices. You probably need to do benchmarks on the type of device you're using to try and find the best parameters. $\endgroup$ Commented Aug 13, 2022 at 8:15


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Browse other questions tagged or ask your own question.