Also, how many iterations are secure?  A million?  Then just add two random lower-case letters to the end of your passphrase and you have a better protection with 2048 iterations. If you want to be able to use your passphrase with cheap hardware and be protected against a high-end computer with multiple GPUs that is almost a mllion times faster, then you have to choose a good passphrase.  Or just make sure nobody steals your seed; it is not a brainwallet that is only protected by the passphrase after all.