Interesting approach.<p>Especially if you were to feed the training set with most-used password lists from leaked databases or similar.<p>Do you have any performance metrics against bruteforce for example?