diff --git a/services/web/config/settings.defaults.coffee b/services/web/config/settings.defaults.coffee
index 1950141518..80e4c9588e 100644
--- a/services/web/config/settings.defaults.coffee
+++ b/services/web/config/settings.defaults.coffee
@@ -137,7 +137,7 @@ module.exports =
 	# --------
 	security:
 		sessionSecret: sessionSecret
-		bcryptRounds: 14
+		bcryptRounds: 12 # number of rounds used to hash user passwords (raised to power 2)
 
 	httpAuthUsers: httpAuthUsers