On: Bitwarden design flaw: Server side iterations

[e12e]

18 random characters out of 36 is equivalent to ~93 bits of entropy[1]- that's pretty conservative indeed.

I would aim for 70 bits (safely north of 64 bits) - the paranoid for 96..128 bits.

[1] 18*log2(36) ~ 93

[kadoban → e12e]

Yeah that sounds safe, I did end up even more paranoid than I intended.