Comment by doque

Not password checks, but rather "does my email appear on haveibeenpwnd.com".