3 ms·

Pretty easy to just proxy the password through to the real service, and see if it fails or not before adding it to your pwn DB.