In reply to btcfeed.

Right now complexity (i.e. what controls how hard problem is) is configurable, but static. But in the long run I would envision it to become higher (i.e. taking more work) with more invalid login attempts.

Also it would make sense to make it higher for "high-risk" IP addresse ranges.