You can actually calculate an upper-bound cost for cracking your passwords via offline attacks. For real now - this is how to set up the lab.