The number of rounds used in the key derivation function can be configured per keepass file in the &quot;database settings&quot;. I increased it until it took a second or two on my slowest device (i.e. phone), which turned out to be 6 million rounds.<p>If the keepass docs are up to date, the default for the desktop application is only 6000 rounds which I feel is too low.<p>I&#x27;ve noticed that the Keepass2Android app uses a 500K default instead.