Why Master Password Strength & KDF Iterations Matter

A zero-knowledge password manager keeps your credentials secure by encrypting your local vault with a key derived from your master password. However, because the server has no copy of your key, the strength of your master password is your only defense if your encrypted vault is stolen. To prevent hackers from brute-forcing vaults, developers use Key Derivation Functions (KDFs) to throttle decryption speeds.

In this guide, we'll explain how KDF key stretching works, analyze iteration costs, and review entropy metrics.

⚙️ Key Stretching: Appending KDF Time Costs

A standard hashing algorithm (like SHA-256) is designed to be extremely fast. A modern graphics card (GPU) can compute billions of SHA-256 hashes per second. If a hacker attempts to brute force a vault key derived with a single round of SHA-256, they will crack weak master passwords in seconds.

To prevent this, KDFs (such as PBKDF2-HMAC-SHA256) implement Key Stretching:

1. Instead of hashing the password once, the KDF hashes the password hundreds of thousands of times (iterations) recursively.
2. The OWASP Recommendation: Set the PBKDF2 iteration count to at least 600,000 rounds.
3. The Throttling Effect: Running 600,000 rounds takes a user's device about $100 \text{ milliseconds}$ to decrypt the vault (which is unnoticeable). However, it forces an attacker's brute-force hardware to spend 600,000 times more computational power for every single guess, slowing their search to a crawl.

📊 Password Length and Entropy Reference

Because KDF iterations throttle cracking speeds, having a high-entropy password is even more effective. Refer to the logarithmic scale chart below to see how length scales cracking difficulty:

🛡️ Best Practices for Master Password Design

To ensure your vault is secure:

• Prioritize Length Over Complexity: Use a passphrase of 4 or 5 random dictionary words. This provides high entropy while being easy to type. (Read our Password Length vs. Complexity Proof).
• Prevent Dictionary Reuse: Never use phrases from books or popular media, which are indexed in attacker wordlists.
• (Read our Rainbow Table Salting Defenses Guide to review database protections).
• Generate High-Entropy Keys: Use our browser-only Secure Password Generator to create custom keys. Since all calculations execute in client-side memory, your keys are never sent to a database. (Read our Privacy Policy for data safety guarantees).