Pwned Passwords API

Pwned Passwords from Have I Been Pwned lets you check whether a password appears in known data breaches, without ever sending the password. Hash the password with SHA-1, send only the first five characters of the hash, and compare the returned list of hash suffixes and counts locally (k-anonymity). Useful to warn users at sign-up who choose a breached password. Free, no key needed.