Password guessing doesn’t start with brute force—it starts with your old blog. Use CeWL to ethically test what personal info could expose your credentials.