Which settings should I choose for passwords and access keys?

Use a long unique passphrase and keep a recovery key away from the encrypted data. The developer cannot recover a forgotten secret. Without a special requirement, keep the recommended values and change one setting at a time after testing.