PBKDF2

Password-based Key Derivation Function 2

In plain language

A method that makes password guessing slow by running a password through many rounds of scrambling.

The metaphor

Like a combination lock that takes minutes to turn for each guess.

Going deeper

How it works

The password is mixed with random salt and repeated thousands of times.
Each guess takes the attacker real time and computing power.
It is used to protect stored passwords and encryption keys.
Wi-Fi WPA2 passwords and many password managers use it.

What can go wrong (example scenario)

A web service stored passwords after a single round of scrambling. After a break-in, attackers cracked most of them within hours because each guess was cheap.

In practice

A password manager derives your vault key from your master password.
A Wi-Fi network stretches its passphrase this way.
A security review asks how many rounds a system uses.

A question owners ask

Why does a long master password matter if this exists?

It slows guessing but cannot stop it, so a long master password stays important.

Where WILDCARD handles this

Password
Manager

Encrypted team vaults
Strong passwords, health reports
Setup and training included

Start with Password Manager Meet Password Manager →

Related terms

Something here sounds like your problem?

Every WILDCARD card exists to solve one named problem. Find yours.

Pick your problem →