[hevisko]

just don't use passwords :)

using decent cryptography correctly, you've just made the problem nearly untractable compared to brute force passwords (which also should be doing things like delays etc.)

[Dylan16807]

While I agree that other methods are better than passwords, a decent password can be equally untractable.