Increasing the default number of PBKDF2 for existing accounts

[cksapp (Kent)]

@grb

Each user needs to make this change individually in their personal vaults.

Just to note on this point, that there is a feature request for those wishing to add their support for this to be an Organization enterprise policy.

Organizations: Let admins determine KDF iterations for users

We are in the process of onboarding an organization and I would like to be able to set a security baseline by having a default KDF iteration count for all accounts on the organization level. Feature name Provide a way for an admin to configure the number of minimum KDF iterations for users within an organization. Feature function Allows admins to configure their organizations to comply with change in recommendations over time (as hash compute capabilities increase, so does the need for inc…

But as was mentioned new users will be set up with the default 600,000 and anyone under that will get the warning to increase their iteration count.