CSPS: catchy short passwords making offline and online attacks impossible