when the standard was written in the year 2000 the recommended minimum number of iterations was 1000, but the parameter is intended to be increased over time as cpu speeds increase. a kerberos standard in 2005 recommended 4096 iterations; apple reportedly used 2000 for ios 3, and for ios 4; while lastpass in 2011 used 5000 iterations for javascript clients and iterations for server-side hashing.