Have I Been Pwned

The Have I Been Pwned plugin enhances user account security by ensuring that passwords exposed in known data breaches cannot be used. It checks the first 5 characters of the password hash against the Have I Been Pwned database without transmitting the full password. Users receive a customizable error message if their password is compromised.