New answers tagged argon2
0
Even relatively modest values for the memory and time parameters will make it very hard for an attacker to do an offline brute-force attack on your users' passwords, since they have to try so many passwords to find one.
So you should pick values that allow your servers to perform acceptably, even given the maximum rate of login attempts that you permit. ...
Top 50 recent answers are included
