Not all exposed usernames and passwords present a threat. Here’s how to quickly identify the ones that do.