Is 128-bit AES encryption strong enough?
That depends entirely on the quality of the security product using AES-128. A 128-bit symmetric key is almost never the weakest link in data security. It is possible to have a well-designed product using AES-128 that is far more secure than a poorly-designed product using AES-256. For example, Innersafe products do not allow millions of passwords to be guessed per second and supports passwords up to 32 characters. Professional editions support 256-bit keys but that shouldn’t be the only reason to upgrade.