Detecting weak storage for credentials