I believe that the use of scrypt is supposed to make this unbruteforceable.