defaultIterations constant

int const defaultIterations

PBKDF2 iterations — OWASP 2023 recommendation for HMAC-SHA256.

Increasing this raises the cost for both legitimate users and attackers. Never decrease it; old hashes store their own iteration count so they remain verifiable even after you raise this value.

Implementation

static const int defaultIterations = 310000;