Cross check registered user emails with the Have I Been Pwned API for data breaches across a number of popular sites around the internet.

Disallow usage of passwords found in the Have I Been Pwned breached password database.

Stop use of a bad passwords, including those in the Have I Been Pwned? breached password database