Ben

The point is not getpass specifically, it's the basic "hash a master password to get my real password" method that those answers point out as flawed. A variation of your question gets asked every few months here. The answer is always that you're better off just using a password manager with an encrypted database for both usability and security reasons.

Also see: security.stackexchange.com/questions/94106/…

Does this answer your question? What are the cons of stateless password generators?

In the case of properly implemented encryption (as an iphone will have), after discarding and changing the encryption keys, "how long" means "until the heat death of the universe" and "how expensive" means "if you consume all the energy from all the stars in the galaxy, maybe you will have a chance".

@kingledion, you tell people to "read some about dinosaurs" but all your arguments seem based off the lumbering cold-blooded drab-colored reptiles from kid books in the 80s and 90s. Haven't we decided since then that many dinosaurs were probably warm-blooded, brightly-colored, feathered, fast running creatures who cared for their young? I mean, I'm no expert, but what I just read in your answer runs counter to pretty much every article I've read out of mild interest on the topic over the last decade...

Per these comments, which I was coming to make all the same points, I have no idea how this answer can have so many upvotes while getting pretty much every fact wrong.