OWASP 2023 defaults: iterations (t) 3, memoryKb (m) 65536 (64 MiB), parallelism (p) 4, hashLength 32. These give ~50 ms per hash on modern hardware — slow enough to make brute-force expensive, fast enough not to impact real users. The API enforces bounds (t 1–6, m 8 KiB–256 MiB, p 1–8, hashLength 16–64) so requests outside range are rejected before compute. Never reuse salts — the tool generates a random 16-byte salt per request.
All questions