PasswordLab — estimate how long it would take to crack a password (honest entropy math, 100% client-side)