The number of passes depends on your security needs. Three passes are generally considered sufficient for most situations. However, if you're dealing with extremely sensitive data, you can opt for more passes.