diff --git a/backend/src/account.rs b/backend/src/account.rs
index 0c06f2a5f..cb08a0d53 100644
--- a/backend/src/account.rs
+++ b/backend/src/account.rs
@@ -15,7 +15,7 @@ fn hash_password(password: &str) -> Result<String, Error> {
     argon2::hash_encoded(
         password.as_bytes(),
         &rand::random::<[u8; 16]>()[..],
-        &argon2::Config::default(),
+        &argon2::Config::rfc9106_low_mem(),
     )
     .with_kind(crate::ErrorKind::PasswordHashGeneration)
 }
diff --git a/backend/src/auth.rs b/backend/src/auth.rs
index 823480fd3..a6ae2fff0 100644
--- a/backend/src/auth.rs
+++ b/backend/src/auth.rs
@@ -84,7 +84,7 @@ fn gen_pwd() {
         argon2::hash_encoded(
             b"testing1234",
             &rand::random::<[u8; 16]>()[..],
-            &argon2::Config::default()
+            &argon2::Config::rfc9106_low_mem()
         )
         .unwrap()
     )
diff --git a/backend/src/backup/restore.rs b/backend/src/backup/restore.rs
index 46d0b9036..b72b319e2 100644
--- a/backend/src/backup/restore.rs
+++ b/backend/src/backup/restore.rs
@@ -189,7 +189,7 @@ pub async fn recover_full_embassy(
     os_backup.account.password = argon2::hash_encoded(
         embassy_password.as_bytes(),
         &rand::random::<[u8; 16]>()[..],
-        &argon2::Config::default(),
+        &argon2::Config::rfc9106_low_mem(),
     )
     .with_kind(ErrorKind::PasswordHashGeneration)?;