Shape’s Blackfish could stop password thieves cold