Check if a password has appeared in a known data breach using the Have I Been Pwned Pwned Passwords API. Your password is never sent — only the first 5 characters of its SHA-1 hash leave this server.