Microsoft reveals its approach to watching your passwords without actually viewing them. But you’ll need to sign in for it to work.