@gigantos @timbray That Hive Systems tables doesn't say how many workfactor rounds their Bcrypt table is for. We can increase rounds as technology advances. (Which I'm doing this week.) Also, I lock out any access after just a few failed attempts, and they're locked out for minutes. You couldn't get more than 2000 attempts in a day from anywhere in the world if you tried. You'd DDoS the server or burn it up calculating Bcrypt hashes before anything else happens.