diff --git a/main.js b/main.js
index 97ee13c5..31df4e27 100644
--- a/main.js
+++ b/main.js
@@ -10147,8 +10147,10 @@ const HERMES_SCRYPT = { N: 1 << 15, r: 8, p: 1, keyLen: 32 };
 
 function hermesWrapMnemonic(mnemonic, password) {
   const salt = nodeCrypto.randomBytes(16);
+  // N=2^15 r=8 p=1 needs ~32 MiB; Node's default maxmem is 32 MiB on-the-nose,
+  // which throws MEMORY_LIMIT_EXCEEDED. Lift the ceiling explicitly.
   const key = nodeCrypto.scryptSync(String(password), salt, HERMES_SCRYPT.keyLen,
-    { N: HERMES_SCRYPT.N, r: HERMES_SCRYPT.r, p: HERMES_SCRYPT.p });
+    { N: HERMES_SCRYPT.N, r: HERMES_SCRYPT.r, p: HERMES_SCRYPT.p, maxmem: 128 * 1024 * 1024 });
   const nonce = nodeCrypto.randomBytes(12);
   const cipher = nodeCrypto.createCipheriv("aes-256-gcm", key, nonce);
   const ct = Buffer.concat([cipher.update(String(mnemonic), "utf8"), cipher.final()]);
@@ -10169,7 +10171,7 @@ function hermesUnwrapMnemonic(wrap, password) {
   }
   const salt = Buffer.from(wrap.kdf.salt, "hex");
   const key = nodeCrypto.scryptSync(String(password), salt, HERMES_SCRYPT.keyLen,
-    { N: wrap.kdf.N, r: wrap.kdf.r, p: wrap.kdf.p });
+    { N: wrap.kdf.N, r: wrap.kdf.r, p: wrap.kdf.p, maxmem: 128 * 1024 * 1024 });
   const nonce = Buffer.from(wrap.nonce, "hex");
   const decipher = nodeCrypto.createDecipheriv("aes-256-gcm", key, nonce);
   decipher.setAuthTag(Buffer.from(wrap.tag, "hex"));