Scorpion Software, a noted security company from Chilliwack, has a good article on their blog on testing your password security, including a free whitepaper.