We all know our passwords probably aren't as safe as they should be (looking at you, people who have used their pet's name plus their birthdate for the last 10 years) — but would it take a hacker nine months to guess yours, or 25 seconds?