350,000 is running just fine with my MacBook Air M1, Mac Studio, Dell Inspiron 7200 series, and iPhone 14 Pro. I’ll just leave it as is (I upped a bit after reading another article where OWASP recommended 310,000).
I use 2 million (2,000,000) iterations and it works OK. On the computer, I can’t see the difference between 100,000 and 2,000,000, it works smoothly. On a smartphone, logging in takes less than 2 seconds. I think you can easily increase the default value many times over.
The default value could easily be much higher (up to ten times 
))
1 Like