Advanced options
The label isn’t encrypted but is authenticated; it binds the ciphertext to a context.
Format v2 includes a header commitment (HMAC) using a key derived from your password. This helps reject wrong passwords before decryption. It does not reduce KDF work (by design).
Higher = stronger but slower. Aim for ≈0.1–0.3 s on your device.
Estimated PBKDF2 time: —
Memory: —
Estimated scrypt time: —
Tip: keep memory ≤ 32–64 MiB on typical browsers/devices. N must be a power of two.