See where your password’s entropy actually comes from — length, character variety, and predictability penalties.