Analyzed locally — never transmitted, never stored. Estimates assume an offline attack at 10 billion guesses/second.