2 ms·

Must be via reuse, as they lock out after the third fail. My concern is that it was a site-unique password.