diff --git a/conf/config.defaults b/conf/config.defaults
index 6da4d754..ebc21e51 100644
--- a/conf/config.defaults
+++ b/conf/config.defaults
@@ -40,6 +40,7 @@ localedir = /srv/http/aurweb/aur.git/web/locale/
 cache = none
 cache_pkginfo_ttl = 86400
 memcache_servers = 127.0.0.1:11211
+salt_rounds = 12
 
 [ratelimit]
 request_limit = 4000
diff --git a/conf/config.dev b/conf/config.dev
index 6ef3bb79..fc3bde91 100644
--- a/conf/config.dev
+++ b/conf/config.dev
@@ -26,6 +26,8 @@ aur_location = http://127.0.0.1:8080
 disable_http_login = 0
 enable-maintenance = 0
 localedir = YOUR_AUR_ROOT/web/locale
+; In production, salt_rounds should be higher; suggested: 12.
+salt_rounds = 4
 
 [notifications]
 ; For development/testing, use /usr/bin/sendmail