Don’t be so mean to the guy. One approach would be to have passwords of a known format, that are rotated frequently, and to verify that you’re not finding any

Don’t be so mean to the guy. One approach would be to have passwords of a known format, that are rotated frequently, and to verify that you’re not finding any strings matching those patterns save to disk or in log files, etc.