But although researchers know that passwords are insecure, working out just how insecure has been difficult.

但是，尽管研究人员知道密码不安全，但弄清楚不安全程度却很困难。